Privacy policy

The data controller is the publisher of the website (see the legal notice). Contact: contact@mygoldrewards.app.

• Account: first name, email, language, password (stored only as an irreversible hash).
• Referrals: the member who invited you and the members you invited.
• Trading accounts: broker, account number, server, platform, investor password (encrypted), balance and currency read during verification.
• Trading activity: the history of your connected accounts (symbol, volume, date, result, deposits and withdrawals), read to calculate cashback, check eligibility and prevent fraud. Only the gold lots counted for cashback are stored; the rest of the history is read without being kept.
• Earnings and payouts: amounts, payout method, USDT address, transaction references.
• Security: IP address during sign-in, sign-up and password reset attempts.

• To provide the service: create your account, count your lots, calculate and pay your cashback and bonuses (performance of the contract).
• To check with the brokers that your accounts are linked to MyGoldRewards (performance of the contract).
• To send you service emails: welcome, password reset, account approval, payouts (performance of the contract).
• To protect the service against fraud and attacks (legitimate interest).
• To meet our accounting and legal obligations (legal obligation).

We send no advertising, we do not sell your data and we use no audience measurement or targeted advertising tools.

Your data is accessible only to MyGoldRewards and to the providers strictly needed for the service:

• Render (hosting of the website and database, servers in the European Union);
• MetaApi (reading the history of your MetaTrader accounts);
• Resend (sending the service emails);
• the partner brokers, to check that your trading accounts are linked to us.

Some of these providers are based outside the European Union, notably in the United States. These transfers are covered by the safeguards provided for by the GDPR (European Commission standard contractual clauses or the EU–US Data Privacy Framework).

• Account and trading account data: while your account is active, then 3 years after it is closed to handle any claims.
• Earnings and payouts: 10 years, for accounting obligations.
• Investor password: deleted when your account is closed, or earlier on request.
• Security logs (sign-in attempts): 24 hours.
• Password reset links: valid for 1 hour.

Connections to the website are encrypted (HTTPS). Website passwords are never stored in plain text. Investor passwords are encrypted (AES-256). Access to the database is limited to the service administrator.

The website only uses cookies that are necessary for it to work, which do not require consent:

• a session cookie to keep you signed in (30 days);
• a referral cookie that remembers the code of the member who invited you until you sign up (30 days).

You can access, correct or delete your data, restrict or object to its processing, or ask for its portability by writing to contact@mygoldrewards.app. We reply within one month.

You can also lodge a complaint with the French data protection authority (CNIL, cnil.fr) or the data protection authority of your country.