Privacy Policy

Last updated: 15 August 2026 · OWOW Inc., Arato 2-4, Chuo Ward, Fukuoka City, Fukuoka Prefecture, Japan · [email protected]

1. Who is responsible for your data

The controller of your personal data is OWOW Inc., a company registered in Japan under corporate number 9290001089293, of Arato 2-4, Chuo Ward, Fukuoka City, Fukuoka Prefecture, Japan. Privacy enquiries: [email protected]. We have not appointed a Data Protection Officer; privacy questions are handled by the contact above.

2. What we collect

2.1 Information you give us

• Account details: first name, last name, email address, telephone number, and a password which we store only as a salted hash — we cannot read it.
• Authentication data: where you sign in with Google, the profile identifier and email address that Google returns. Where you sign in by SMS, your phone number and a hashed one-time code.
• Billing details: plan, transaction history and billing contact. Card and payment credentials are collected and held by our payment providers, not by us.
• Support and correspondence: what you send us, including attachments and screenshots.
• Configuration you enter: strategy settings, risk parameters, symbol lists and preferences.

2.2 Information generated by using the product

• Trading integration data: broker account number, account currency, balance and equity as reported by your terminal, symbols traded, order and position records, tickets, fills, timing and resulting profit or loss. This is what makes performance reporting and strategy feedback possible.
• Bridge and device identifiers: the token that pairs your terminal with your account, and the terminal build and connection status.
• Usage data: pages and features used, actions taken, timestamps, and errors encountered.
• Technical data: IP address, approximate location derived from it, browser and operating system, device type and language.
• Security data: sign-in attempts, session records and audit entries for sensitive actions.

2.3 What we deliberately do not collect

We do not ask for, receive or store your broker account password or your broker's investor or trading credentials. The connection to your terminal works through software you install and a token you can revoke. We do not need your broker login and will never request it.

3. Why we use it, and our legal basis

Where we rely on legitimate interests, we have considered whether those interests are overridden by your rights, and you may object as described in section 8.

4. Who we share it with

We do not sell your personal data, and we do not share it for cross-context behavioural advertising. We share it only with:

• Infrastructure and hosting providers that run our application and store its data.
• Payment providers that process subscriptions and hold card data under their own controls.
• Communications providers that deliver email and SMS, including one-time sign-in codes.
• AI model providers, where a feature you use sends content for analysis. We send what the feature needs — such as chart context and market data — and do not send your account credentials.
• Professional advisers (legal, accounting, audit) under confidentiality.
• Authorities, where we are legally required to disclose, or where disclosure is necessary to protect rights, safety or property.
• An acquirer, if we are involved in a merger, acquisition, financing or sale of assets. We will notify you if your data becomes subject to a different privacy policy.

Providers acting on our behalf are processors bound by contract to use the data only for our instructions and to protect it.

5. International transfers

We and our providers may process data in countries other than yours, including outside the EEA and the UK. Where we transfer personal data internationally we rely on an adequacy decision where one applies, or on Standard Contractual Clauses (and the UK Addendum where relevant) together with supplementary measures where required. You may request a copy of the safeguards used by contacting us.

6. How long we keep it

• Account and profile data: for as long as your account is open, then up to 24 months after closure, unless a longer period is required.
• Trading and transaction records: for the period required by tax, accounting and anti-fraud obligations, typically 7 years.
• Security and audit logs: typically 12 months.
• One-time sign-in codes: minutes — they are deleted as soon as they are used or expire.
• Support correspondence: typically 24 months after the matter closes.

We may retain aggregated or anonymised data, which no longer identifies you, indefinitely.

7. How we protect it

We use encryption in transit, hashed and salted password storage, hashed one-time codes, scoped tokens that you can revoke, access controls limiting who can reach production data, rate limiting on authentication endpoints, and audit logging of sensitive actions. No system is perfectly secure, and we cannot guarantee absolute security. Where a breach is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority and, where required, you.

8. Your rights

Depending on where you live, you may have the right to: access a copy of your data; correct inaccurate data; delete data; restrict or object to processing, including profiling and direct marketing; receive your data in a portable format; withdraw consent at any time without affecting prior processing; and complain to a supervisory authority.

If you are in the EEA or UK, these are your rights under the GDPR / UK GDPR. You may complain to your local supervisory authority, or in the UK to the Information Commissioner's Office.

If you are in California, you may request disclosure of the categories and specific pieces of personal information collected, the purposes, and the categories of recipients; request deletion or correction; and opt out of sale or sharing — we do not sell or share personal information as those terms are defined by the CCPA/CPRA. We will not discriminate against you for exercising these rights.

If you are in Japan, you may request disclosure, correction, suspension of use or deletion under the Act on the Protection of Personal Information.

To exercise any right, contact [email protected]. We may need to verify your identity, and we will respond within the period required by applicable law (generally one month under GDPR, 45 days under CCPA).

9. Cookies and similar technologies

We use cookies and local storage for: keeping you signed in and maintaining your session; remembering preferences; and understanding aggregate usage so we can improve the product. Strictly necessary cookies are required for the site to work and cannot be switched off. Where required by law, we ask for consent before setting non-essential cookies, and you can change that choice at any time.

You can also block or delete cookies in your browser, but the Services will not function correctly without session cookies — you will not be able to stay signed in.

10. Automated decision-making

Our products generate analysis, scores and strategy rankings automatically. These do not produce legal or similarly significant effects on you within the meaning of GDPR Article 22 — they are analytical output that informs your own decisions, and no trade is placed except through automation you enable and can disable.

11. Children

The Services are not intended for anyone under 18, and we do not knowingly collect data from children. If you believe a child has provided us data, contact us and we will delete it.

12. Third-party links

Our sites link to third parties, including brokers, payment providers and documentation. Their privacy practices are their own, and we are not responsible for them. Read their policies before providing data.

13. Changes to this policy

We may update this policy. We will change the "last updated" date and, where changes are material, notify you through the Services or by email. Continued use after the effective date means you accept the updated policy.

14. Contact

OWOW Inc.
Arato 2-4, Chuo Ward, Fukuoka City, Fukuoka Prefecture, Japan
Privacy: [email protected] · Security: [email protected]