← Back to Home

Subprocessors

Third parties that process customer data on behalf of Algo-X. Updated 2026-08-07. Material changes are announced via email at least 30 days before they take effect.

ServicePurposeData ProcessedRegion
WhopSubscription billing, payment processing, membership stateEmail, name, payment metadata (no card numbers stored by us)United States
CloudflareDNS, CDN, DDoS protection, captcha (Turnstile)IP address, request metadata, captcha challenge tokenGlobal edge
Namecheap Private EmailOutbound + inbound transactional email (support@algo-x.pro)Email content, recipient address, IP of senderUnited States
GoogleOAuth sign-in, Google Translate widget on public pagesEmail + Google profile id (only on OAuth signup), IP for translateGlobal
DiscordOAuth sign-inEmail + Discord user id (only on OAuth signup)United States
GiphyGIF picker inside the community channelsSearch query, IP addressUnited States
Google Gemini APIAI summarization and assistance inside the dashboardPrompt text + de-identified contextUnited States
SentryError monitoring (server + client)Stack traces, route + method, sanitized request metadata (NO body, NO auth)United States
AWSCustomer NinjaTrader VM hosting (Helionix-managed cloud option)Trade signals + account configuration only — no personally-identifiable data on the VMsus-east-1 (default), us-west-2 (failover)

Data subject rights

EU + California residents can request a copy of their data (Article 15 / CCPA §1798.110) or deletion (Article 17 / CCPA §1798.105) at any time. Logged-in customers can do this self-serve from Account → Profile & Billing → Security. Customers without active access can email support@algo-x.pro with the subject line "DSAR" — we respond inside 30 days.

Algo-X retains trade history for the period required by U.S. financial recordkeeping rules (typically 5–7 years) even after account erasure; that subset is anonymized so it cannot be tied back to a natural person.