IsTradeable
ESEN
← Back
Data protection · GDPR

Privacy policy

Last updated: 2026-04-19

Data controller

  • Name: Álvaro Rodríguez Ilárraz
  • Tax ID (NIF): 05458361R
  • Registered address: Calle Cerro del Aire, 3 · 28221 Madrid · Spain
  • Contact: support@istradeable.com

Data we process

CategoryDataWhen
Accountemail, bcrypt-hashed passwordSign-up
BillingStripe customer ID, subscription historyPurchase
Licenselicense key, bound MT5 account numberFirst panel use
Communicationsemail, message contentSupport / newsletter
TechnicalIP address, user-agent, access logsEvery request

Purpose and legal basis

  • Service delivery (art. 6.1.b GDPR, contract performance): account creation, license issuance, access to downloads.
  • Billing and tax obligations (art. 6.1.c GDPR).
  • Support and operational communications (art. 6.1.b GDPR).
  • Newsletter (art. 6.1.a GDPR, consent). You can unsubscribe from every email.
  • Fraud prevention (art. 6.1.f GDPR, legitimate interest): binding the license to the MT5 account number deters resale.

Processors

We rely on the following providers, all under GDPR-compliant agreements:

  • Stripe Payments Europe Ltd. — payment processing.
  • Brevo (Sendinblue SAS) — transactional and newsletter emails.
  • Railway Corp. — backend hosting and database.
  • Cloudflare / GitHub — static asset delivery (where applicable).

Some of these providers may perform international data transfers covered by Standard Contractual Clauses (SCCs) approved by the European Commission.

Retention

We retain your data while your account is active and for the legal retention periods afterwards (mainly tax and accounting obligations, up to 6 years).

Your rights

You may at any time exercise the rights of access, rectification, erasure, restriction, portability and objection by writing to support@istradeable.com. You may also lodge a complaint with the Spanish Data Protection Agency (AEPD).

Security

Passwords are stored as bcrypt hashes. All traffic is encrypted via HTTPS. We never store card data — it is handled directly by Stripe within its PCI-DSS environment.

Legal notice → · Cookies → · Terms →

© IsTradeable 2026
terms · privacy · cookies · legal