Privacy Policy

Who is the controller

Evander Labs, Scotland, United Kingdom — contact order@evander.to — is the data controller for personal data processed via evander.to under UK GDPR.

What we collect and why

• Signup data (email, optional name, what you trade, plan preference): to run the founding wave, contact you about your box, and operate your account. Lawful basis: contract / legitimate interests.
• Operational data (server logs, IP addresses, service telemetry from your box): security, debugging, keeping the service running. Lawful basis: legitimate interests.
• Billing data (when paid plans launch, handled by a payment processor — we never see full card numbers).

We do not run third-party analytics or advertising trackers on this site, and we never see or store your broker passwords. Content on your box (strategies, tapes, results) is yours; we access boxes only for provisioning and repair, and such access is logged.

Sharing

Infrastructure is hosted with DigitalOcean (servers in the UK/EU where available). Email we send goes through our mail provider. Broker signup links take you to the broker's own site under their privacy policy — we may receive a commission if you open an account (see the affiliate note in the footer). We do not sell personal data.

Retention

Signup records: until you ask us to delete them or 24 months of inactivity. Server logs: up to 90 days. Destroyed boxes are deleted, not archived.

Your rights

You have UK GDPR rights of access, rectification, erasure, restriction, portability and objection. Email order@evander.to. You can complain to the Information Commissioner's Office (ico.org.uk).