Privacy Policy
Last updated: February 12, 2026. This Privacy Policy outlines how Photon AI Spain collects, processes, safeguards, and respects your personal data in accordance with applicable UK data privacy standards and statutory regulations.
1. Data Controller Information
Photon AI Spain operates as the data controller for personal data processed through our technical domain, quantitative software platform, and user communications. If you have any inquiries regarding data protection practices, you can direct correspondence to our designated data team at Corn Street 184, EC4N 7BJ London, United Kingdom, or via email at [email protected].
2. Categories of Information We Collect
We process information only to the extent necessary to deliver reliable algorithmic trading infrastructure, maintain system security, and comply with regulatory requirements. The data processed includes:
- Identification and Contact Data: Full name, verified email address, phone number, and residential territory.
- Technical and Network Telemetry: IP address, device fingerprints, browser specifications, operating system version, connection timestamps, and latency diagnostic logs.
- Usage and Interaction Metrics: Interface preferences, execution parameters selected, backtest queries run, and navigation patterns across our platform.
- API Connection Credentials: Encrypted, restricted API public keys supplied by the user to interface algorithmic bots with external exchanges (secret keys are stored inside isolated hardware security modules and never exposed).
3. Legal Bases for Data Processing
Under United Kingdom data protection statutes (including the UK GDPR and Data Protection Act 2018), we ground our processing on explicit lawful frameworks:
- Performance of Contract: Facilitating platform features, routing execution commands, and maintaining account access.
- Legitimate Interests: Protecting the infrastructure from fraudulent intrusions, bot abuse, and unauthorized load vectors, as well as optimizing computational efficiency.
- Legal and Regulatory Compliance: Satisfying statutory anti-money laundering (AML), counter-terrorist financing (CTF), and fiscal verification obligations where applicable.
- Explicit Consent: Sending discretionary technical updates or analytical whitepapers when you have explicitly opted in.
4. How We Secure and Store Your Data
Photon AI Spain deploys defense-in-depth architectural standards. All data in transit is encrypted using TLS 1.3 cryptographic suites, while resting databases are secured with AES-256 cipher mechanisms. Access to production environments is strictly restricted to authenticated personnel through hardware multi-factor tokens and audited role-based permissions.
5. Data Sharing and Third-Party Disclosures
We never sell, monetize, or rent personal user records to third-party advertisers. Information is only disclosed to vetted service providers who assist us in operational continuity under strict contractual data protection agreements:
- Cloud hosting providers and distributed computing data centres situated in certified regions.
- Identity verification providers and fraud prevention services.
- Statutory, regulatory, or law enforcement authorities when mandatory under valid UK court orders or applicable legal obligations.
6. Cookies and Tracking Technologies
We utilize strictly necessary session cookies and functional telemetry tokens to remember UI states, manage authentication sessions, and measure page performance. You may configure your browser software to block or alert you about cookies; however, certain automated platform modules may not function properly without functional tokens enabled.
7. Data Subject Rights
In accordance with applicable privacy legislation, you maintain specific rights regarding your personal records, including:
- The right to request access to the personal data we hold about you.
- The right to rectify inaccurate, outdated, or incomplete records.
- The right to request data erasure ("right to be forgotten") subject to statutory retention mandates.
- The right to restrict or object to certain forms of data processing.
- The right to request data portability in a machine-readable format.
To exercise any of these statutory rights, please submit a verified written request to [email protected].
8. Data Retention Periods
We retain personal information solely for the duration required to achieve the operational purposes outlined in this Policy, or as mandated by financial, tax, or legal archiving frameworks in the United Kingdom. Upon expiry of the requisite retention window, personal records are securely deleted or pseudonymized.