Version 9 August 2026
Privacy Notice
Josiah Barrett trading as Aurum Signal is the controller for personal data described here. Contact: Only1syre@gmail.com. A complete postal address must be added before paid public launch.
Data we use
We may process your identity and contact details; verified mobile number; billing and subscription metadata (card details remain with the payment provider); MT5 account number, broker server, account type and telemetry; trading-experience answers; support messages; affiliate attribution; consent records; device, login, security and service logs; research, execution and performance measurements. With optional analytics consent, a separate first-party ledger records an anonymous session identifier, campaign/hook, page and funnel event. That ledger does not contain your IP address, email, mobile number or MT5 account. We do not ask for or need your MT5 password.
Why and lawful bases
- Contract: create your account, licence, checkout, installer, support and requested service.
- Legitimate interests: secure the service, prevent fraud and duplicate accounts, diagnose faults, improve anonymised research and operate the affiliate programme, balanced against your rights.
- Legal obligation: tax, accounting, consumer, sanctions and lawful authority requests.
- Consent: optional email/SMS marketing and anonymous funnel analytics. You may withhold or withdraw consent without affecting earlier lawful processing or the service.
Automated processing and AI Trader
Aurum uses rules and models to classify research, market regimes, execution readiness and risk conditions. These outputs can block automated orders or adjust configured risk. They are not a legal or credit decision. You can disable automated trading and ask for an explanation or human review of an account restriction.
If you choose to use AI Trader, your typed or transcribed question, a limited recent conversation history and sanitised market/account context are sent to the configured AI model provider to generate the answer. The model request excludes your email, mobile number, MT5 login, broker server, exact balance and credentials; it uses a one-way customer safety identifier and requests that the provider does not store the generated response for later retrieval. Aurum keeps the conversation, stated facts, estimates, reports and any gated-trade decision in your tenant record so you can review the service and we can audit safety. Do not type personal credentials or sensitive third-party information into AI Trader.
Who receives data
We use service providers for hosting, email, SMS verification, payments, security, AI processing and support, currently including infrastructure providers, Stripe, OpenAI when AI features are enabled and—when enabled—Twilio. Affiliates receive aggregated commission information, not your credentials. Providers act under their own terms and/or data-processing obligations. We disclose data where legally required or to protect users.
International transfers
Some providers may process data outside the UK. Where UK adequacy does not apply, we use appropriate contractual safeguards and assess transfer risk. Ask us for relevant safeguard information.
Retention
Account and contract records are normally kept for the service term and up to six years afterwards for legal claims and accounting. AI Trader conversation turns are limited to the latest 500 per account and retained for up to 12 months during normal operation; safety and transaction audit records may be retained with the account record. Anonymous funnel events are retained for up to 180 days; security logs generally for up to 12 months; unsuccessful verification records for up to 90 days; support records for up to three years; marketing consent until withdrawal plus a suppression record. We may keep anonymised statistics that no longer identify you. These periods may be shortened or extended where justified by law, security or an active dispute.
Your rights
You may ask for access, correction, erasure, restriction, portability, objection, consent withdrawal and review of qualifying automated decisions. Rights depend on context. Contact us first. You may complain to the Information Commissioner’s Office.
Security and children
We use access controls, signed licences, tenant separation and encrypted connections where supported. No service is perfectly secure. Aurum is for adults aged 18+ and is not knowingly offered to children.