Privacy Policy

01 / Data Controller Identity & Contact Information

This Privacy Policy governs data processing activities conducted by Infortts Organization (“Infortts”, “we”, “us”, or “our”), governing our websites (infortts.com, infortts.site, and associated subdomains), mobile applications (including Mitochondria, Meeseeks, Lexi, Yorgia, and Orthrozanclus), autonomous algorithmic trading engines, and backend APIs.

02 / Categories of Data We Collect

We process the following categories of information depending on your interaction with our systems:

• Account & Identification Data: Name, email address, phone number, and cryptographic credentials provided during authentication or customer support interactions.
• Third-Party Platform & Social Media Data: Scoped user IDs, profile handles, message tokens, and shared media URLs received via authorized APIs (e.g., Meta Graph API for Instagram, Telegram MTProto API, WhatsApp Business via Evolution API). We only receive data you intentionally communicate to our verified endpoints.
• Algorithmic Trading & Financial Telemetry: MT5 terminal instance identifiers, simulated/live account login numbers, server hostnames, trading pair confluences, open position tickets, execution timestamps, and risk governance parameters. Note: Plaintext account trading passwords are never persisted in unencrypted databases.
• Technical, Device, and Network Telemetry: IP addresses, browser fingerprint, operating system version, Cloudflare Ray IDs, access logs, and routing metrics collected automatically for security auditing and DDoS mitigation.
• Session & Essential Tokens: Strictly necessary HTTP-only authentication cookies and encrypted JSON Web Tokens (JWT) used solely to maintain verified sessions.

03 / Legal Bases for Processing (GDPR & International Law)

Under Article 6 of the General Data Protection Regulation (GDPR) and comparable frameworks, we process data under the following lawful bases:

• Contractual Necessity: To provide you with requested autonomous services, trading notifications, and software tools.
• Legitimate Interests: To secure our infrastructure against malicious actors, enforce risk mitigation limits, and optimize algorithmic performance.
• Compliance with Legal Obligations: To adhere to statutory compliance, fraud prevention, and audit requirements.
• Consent: Where you have granted explicit permission (e.g., granting Meta/Instagram permissions via OAuth).

04 / How We Use Your Information

Collected data is deployed strictly for:

• Executing systematic trade risk gates and monitoring algorithmic drawdown limits.
• Processing incoming webhook notifications and directing messages to relevant autonomous AI agents.
• Sending critical automated alerts regarding system health, execution failures, or security breaches via WhatsApp or Telegram.
• Maintaining continuous continuous-integration and over-the-air (OTA) updates across Infortts software suites.

05 / Third-Party Processors & Zero Data Sale Guarantee

We do not sell, rent, monetize, or disclose your personal data to data brokers or advertising exchanges. Data is shared only with verified technical infrastructure providers acting as Data Processors under strict confidentiality obligations:

• Cloudflare Inc.: Edge routing, TLS termination, and DDoS defense.
• Meta Platforms, Inc.: Ingestion of business communication via verified Instagram Graph API webhooks.
• Broker & Prop Firm Execution Servers: Transmitting order directives (e.g., FTMO, FundedNext, XM, Elefin) via dedicated MT5 terminals.
• Oracle Cloud Infrastructure: Dedicated host hardware for encrypted container runtime.

06 / Data Retention & Automated Pruning

We adhere to strict data minimization principles. Ephemeral session tokens expire automatically within 24 to 72 hours. Communication webhook payloads and trade audit trails are retained for ninety (90) days to ensure forensic traceability, after which records are cryptographically wiped or anonymized unless statutory legal preservation applies.

07 / Your Global Privacy Rights

Regardless of your geographic jurisdiction, Infortts grants all users the following fundamental rights:

• Right of Access & Portability: Request an export of all personal data held about you in machine-readable format.
• Right to Rectification: Request correction of inaccurate or outdated records.
• Right to Erasure (“Right to be Forgotten”): Request immediate and permanent deletion of your data.
• Right to Restrict or Object to Processing: Limit how we process specific data streams.
• Right to Withdraw Consent: Revoke granted permissions at any time without retroactive penalty.

To exercise any of these statutory rights, email our Data Protection Officer at dpo@infortts.site. We respond to and execute verified requests within thirty (30) days without charge.

09 / Cookies and Tracking Disclosures

Infortts implements a strictly minimalist cookie policy. We utilize exclusively First-Party Essential Cookies necessary to authenticate users and prevent Cross-Site Request Forgery (CSRF). We do not deploy third-party advertising cookies, cross-site profiling trackers, or invasive analytics pixels.

10 / Protection of Minors (COPPA)

Our platforms, applications, and autonomous algorithmic tools are strictly intended for individuals who are at least eighteen (18) years of age or the age of legal majority in their jurisdiction. We do not knowingly solicit or collect personal data from children under the age of 18. If we identify that a minor has submitted personal information, we immediately purge the data from our clusters.

11 / Amendments to this Privacy Policy

We reserve the right to amend this Privacy Policy periodically to reflect technological enhancements, statutory mandates, or modifications to our swarm topology. When revisions occur, the updated policy will be published with a revised effective date. Continued usage of our platforms following such updates signifies acceptance of the revised terms.