Last updated: April 14, 2026
PineForge ("we", "us", "our") operates the website getpineforge.com and provides automated trading bot services. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you use our Service, in compliance with the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 of India.
1. Information We Collect
a) Information You Provide
- Account Information: Full name, email address, and password when you register.
- Broker Credentials: MT5 login number, server name, and trading password when connecting a broker account. Your trading password is used once for account verification and is never stored in our database.
- Payment Information: When adding funds, payment is processed by Stripe. We do not store your credit card, debit card, or bank account details. Stripe's privacy policy governs payment data processing.
- Bot Configuration: Strategy scripts, trading parameters (symbol, timeframe, lot size), and bot settings you create.
b) Information Collected Automatically
- Usage Data: Bot runtime hours, deployment counts, and account hosting hours for billing purposes.
- Log Data: Bot execution logs, trade signals, and error messages generated during bot operation.
- Trade Data: Trade history (entry/exit prices, P&L, volumes) fetched from your broker account via our trading infrastructure.
- Technical Data: IP address, browser type, device information, and access timestamps from server logs.
2. How We Use Your Information
- To provide, operate, and maintain the Service (running bots, backtesting, billing).
- To process transactions and send billing-related communications.
- To send verification emails and account notifications.
- To monitor and improve the Service's performance and reliability.
- To detect, prevent, and address technical issues, fraud, or abuse.
- To comply with applicable laws and legal obligations.
3. Disclosure of Your Information
We do not sell, trade, or rent your personal information to third parties. We may share information with:
- Payment Processors: Stripe processes payments on our behalf. Your payment data is subject to Stripe's privacy policy.
- Trading Infrastructure Providers: Your broker account credentials (login, server) are transmitted via encrypted connections for bot execution. Trading passwords are not stored.
- Legal Authorities: If required by law, regulation, court order, or governmental request under Indian law or applicable jurisdiction.
4. Data Security
We implement reasonable security practices and procedures as required under the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011:
- All data in transit is encrypted using TLS/SSL.
- Passwords are hashed using bcrypt before storage.
- Broker trading passwords are used once for verification and never stored.
- Database access is restricted to authorized application services only.
- Payment processing is handled entirely by Stripe (PCI DSS compliant).
- We conduct periodic reviews of our security practices.
5. Data Retention
- Account data is retained as long as your account is active.
- Bot logs are retained for 30 days and automatically deleted.
- Trade records are retained for 90 days and automatically deleted.
- You may request deletion of your account and associated data by contacting us.
6. Your Rights
Under applicable Indian data protection laws, you have the right to:
- Access and review the personal data we hold about you.
- Request correction of inaccurate or incomplete personal data.
- Request deletion of your account and personal data.
- Withdraw consent for data processing (which may result in inability to use the Service).
To exercise any of these rights, contact us at lomash@getpineforge.com.
7. Cookies, Analytics & Advertising
We use essential cookies and local storage to maintain your login session and user preferences. With your consent, we also use:
- Google Tag (gtag.js): We load Google's tag manager (
googletagmanager.com) for measurement and ads conversion tracking. By default, all advertising and analytics signals are denied until you accept on the cookie banner — this is implemented via Google Consent Mode v2. - Google Ads (AW-18121065419): When you accept, we record conversion events (e.g. signup, account funded) so we can measure the effectiveness of our advertising campaigns.
- Google Analytics (GA4): When you accept and once enabled, we use aggregate, anonymised analytics to understand how visitors use the site (page views, sessions, country, device). IP addresses are anonymised.
You can withdraw consent at any time by clearing your browser's local storage or using the "Reject" button on the cookie banner. We do not sell or share your personal data for cross-context behavioural advertising as defined by the CCPA/CPRA.
8. Children's Privacy
The Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from minors.
9. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Continued use of the Service constitutes acceptance of the updated policy.
10. Grievance Officer
In accordance with the Information Technology Act, 2000 and rules made thereunder, the Grievance Officer for the purpose of this Privacy Policy is: