Privacy Policy

Mrinav Consulting LLC ("we", "us") operates Vybrel Trading Bot and is the controller of the personal data described here. This policy explains what we collect, why, and your rights. It covers users in the United States, the United Kingdom, the European Economic Area and elsewhere.

1. Data we collect

• Account data: name, email, and (for password sign-in) a securely hashed password; or your identifier from Google, Microsoft or Apple sign-in.
• Security data: multi-factor authentication settings and audit logs of key account actions, with timestamps and IP address.
• Broker connection data: the API key/secret (or OAuth tokens) for a brokerage account you choose to connect. These are encrypted at rest and used only to read your account and, where you authorise it, place the trades you approve.
• Usage data: pages viewed, features used, and technical logs needed to operate and secure the Service.
• Cookies: strictly-necessary cookies for login sessions, security (CSRF) and your display preferences — see our Cookie Policy.

2. How and why we use it

• To provide, secure and operate the Service (perform our contract with you).
• To verify broker connections and, where you authorise it, route your approved trades.
• To send transactional and security notifications (e.g., trade approvals, authorisation reminders, alerts).
• To prevent fraud and abuse and to comply with legal obligations (our legitimate interests / legal duty).

Under the UK/EU GDPR our legal bases are: performance of a contract, our legitimate interests in operating and securing the Service, your consent (where requested, e.g. non-essential communications), and compliance with law.

3. We do not sell your data

We do not sell or rent your personal data and do not use it for third-party advertising.

4. Sharing with service providers

We share data only with providers that help us run the Service, under contract and confidentiality, including: cloud hosting (Amazon Web Services), transactional email (Resend), and the brokers and market-data providers you choose to connect. They process data only on our instructions.

5. Security

We apply technical and organisational safeguards including encryption of sensitive secrets at rest, hashed passwords, optional multi-factor authentication, access controls, audit logging, and rate-limited authentication. No system is perfectly secure; you are responsible for safeguarding your credentials.

6. Retention

We keep personal data for as long as your account is active and as needed to provide the Service, then for the period required to meet legal, tax and dispute-resolution obligations, after which it is deleted or anonymised. You can delete connected broker credentials at any time from your dashboard.

7. International transfers

We are based in the United States and data is processed there. Where we transfer data from the UK/EEA, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses (and the UK Addendum).

8. Your rights

UK/EEA (GDPR): you have the right to access, rectify, erase, restrict or object to processing, data portability, and to withdraw consent; you may complain to your local supervisory authority (in the UK, the ICO).

California (CCPA/CPRA): you have the right to know, access, delete and correct your personal information, and to opt out of "sale"/"sharing" (we do neither). We will not discriminate against you for exercising these rights.

To exercise any right, email privacy@vybrel.com. We will verify your identity and respond within the time required by law.

9. Children

The Service is not directed to, and may not be used by, anyone under 18. We do not knowingly collect data from children.

10. Changes & contact

We may update this policy; the "Effective" date will change and material updates will be notified. Contact: Mrinav Consulting LLC, Mrinav Consulting LLC, Delaware, USA, privacy@vybrel.com.