Privacy Policy

Information we collect

We collect your name, email address and account identifier when you register, together with your portfolio selection, waiting-list status and acceptance of the terms. When you send an enquiry, we collect the contact details, topic and message you provide, together with related correspondence and delivery records.

Our systems and service providers process technical and security information, such as IP addresses, browser and device information, sign-in events and abuse-prevention identifiers. Please do not include passwords or sensitive financial account details in your enquiry.

Signing in

We use WorkOS to manage sign-in. If you choose Google, we receive basic account information, such as your name, email address and account identifier, through WorkOS to create or link your account and verify your identity.

This connection does not give us access to your Google password, emails or files. You can remove the connection in your Google account settings; this does not automatically delete your ALQA account or waiting-list entry.

How we use information

We use your information to manage your account and portfolio selection, maintain the waiting list, respond to your enquiries and tell you when the service you requested becomes available. We also use it for verification and service messages, protection against abuse, fault investigation, privacy requests and legal claims.

Account registration, joining the waiting list and sending an enquiry do not subscribe you to general marketing messages. You can ask us to remove your waiting-list entry by contacting us.

Continuing to hosted trading activation

When you choose to continue activation from your ALQA account, we send the execution service your customer reference, email address, first and last names, country, the IP address observed by our platform for that request, and a return link to your status page in your language. This information lets the execution service create or sign in to your account on its pages hosted under ALQA’s domain and continue brokerage connection and approval.

You may provide identity documents and brokerage information directly to the execution service, its identity-verification provider or your broker under their privacy notices. If the agreement and photo identification are required, you send them yourself to the execution service; do not send them to ALQA. We do not add the handoff data or single-use sign-in link to diagnostic logs or handoff receipts.

Service providers

We use Vercel to host the website and measure visits to its public pages, DigitalOcean to operate account, waiting-list, enquiry-delivery and security records, WorkOS for sign-in, and Google Workspace for email correspondence. We share the information needed for these tasks.

Free registration does not collect card details or send payment information to Stripe.

We do not sell or rent your personal data. We may disclose information when required by law or to protect our rights and address fraud or legal claims.

Cookies and similar technologies

We use cookies to maintain sign-in sessions and complete authentication securely. A local-storage marker keeps sign-out consistent across open tabs. Enquiry forms hold a temporary request reference in page memory to prevent duplicate delivery.

We do not use targeted-advertising cookies or marketing-interest tracking. The cookie notice explains these technologies and their durations.

Visitor statistics

We use Vercel Web Analytics to measure public-page views, estimated visitor numbers, referring sites, approximate country and region, and device and browser types. We do not link these statistics to your account or send form contents, your name or email address. We exclude sign-in, account, waiting-list and staff pages, and remove URL parameters and fragments before sending a page view.

These statistics use no cookies or local storage, and we do not record browsing sessions. We stop sending analytics when your browser enables Do Not Track or Global Privacy Control. Vercel processes the statistics in the United States; our current plan provides 12 months of aggregated report history.

Processing outside your country

Vercel processes website requests in the United States and uses a global delivery network. The DigitalOcean services and database used for account, waiting-list, enquiry-delivery and security records run in Frankfurt, Germany. WorkOS sign-in processing includes the United States. Google Workspace may process email in the United States and other countries where Google or its subprocessors operate.

We use access restrictions and encrypted connections to protect information when operating these services. The provider notices below give further information about their processing practices.

• Vercel privacy notice
• DigitalOcean privacy notice
• Google Workspace data processing terms
• WorkOS privacy notice

Retention

We retain your free profile and waiting-list information while your account and participation remain active. Once both have ended and closure is confirmed, we delete this information, including its application history, within 90 days. We assess valid earlier deletion requests without requiring you to wait 90 days. If specific information is still needed for a legal obligation or dispute, we retain only that information and review the exception. We keep minimal evidence of the terms you accepted separately for ten years after confirmed account closure, to establish the terms that applied and address related claims. This record contains a pseudonymous account reference, the terms version and document hash, language and acceptance time; it does not contain your profile or portfolio selection.

Enquiries and related correspondence are retained for 24 months after the last substantive human contact. Automated messages do not restart this period. Delivery records are retained for 24 months after delivery is resolved; uncertain deliveries are reviewed.

Abuse-prevention identifiers are retained for seven days after the relevant rate-limit window ends. Security evidence retained by ALQA is kept for 12 months after the event. Privacy-case records and minimal deletion evidence are kept for three years after case closure; deletion evidence is retained longer if needed to prevent recovery of information from an older copy.

Temporary exports and restore working copies are removed within seven days after verified completion of their purpose, and no later than 30 days after creation, unless a documented extension applies. Database expiry is processed daily, within 24 hours of eligibility; mailbox expiry is processed weekly, within seven days.

Specific records may be retained longer where a legal obligation or dispute requires it. DigitalOcean database recovery copies expire within a rolling seven-day window. Separately retained exports follow their own expiry period. Deleted information is excluded before a restored copy returns to use. Google Workspace may take up to 180 days to complete deletion from its systems after email is no longer recoverable by us, subject to its contractual exceptions.

Deletion requests

You can request deletion of your account through your account page or by contacting us. We review the request and delete information that is no longer needed, while retaining records required to meet legal obligations or resolve disputes. We explain any exceptions that apply to your request. Submitting a request does not mean deletion has been completed. Backup and provider deletion timing is described above.

Security

We apply technical and organisational measures to protect information, including access restrictions, encrypted connections and monitoring of security events. No electronic system can be guaranteed to be entirely free from risk.

Your rights

Subject to applicable law, you may request access to, a copy of, correction or deletion of your personal data, and may request restrictions on processing or object to it. Where processing relies on your consent, you may withdraw it without affecting the lawfulness of earlier processing.

To submit a privacy request or complaint, email info@alqasignal.com. We may need to verify your identity to protect your information. If we cannot fulfil your request in full, we will explain why and outline the available options.

Changes to this policy

We publish updates on this page with their effective date. We notify you of material changes by an appropriate method and obtain consent where required.