Privacy Policy

Who we are

PropArbiter ("we", "us") operates proparbiter.com and the account review service described on this site. For data protection purposes we are the controller of the personal data described here. Contact: [email protected].

What we collect

• Account data. Name, email address, firm name or trader handle, password (stored only as a hash), language and theme preferences.
• Review data. For each trading account submitted for review: the account login, investor (read-only) password, server name, the trade and balance history read from that account, and the rule set it is judged against.
• Feed data. Price quotes recorded from a firm's server through a feed account the firm provides, and reference market prices. This data contains no personal information.
• Contact and quote requests. Whatever you type into our forms, plus the IP address and browser identifier of the request, used to prevent abuse.
• Technical logs. Server logs with IP addresses, requested pages and timestamps, kept for a short period for security and debugging.

We do not use advertising trackers or analytics cookies. The site stores your language and theme choice in your browser only.

How we use it

• To run reviews and issue reports, which is the service you or the firm asked for.
• To make a report available to both parties to the review, the firm and the trader.
• To publish a report in the public directory only when its owner opts in, and in anonymised form.
• To answer messages, prepare quotes and manage accounts.
• To keep the service secure, prevent abuse and comply with legal obligations.

Legal bases

Where the GDPR or a similar law applies, we rely on: performance of a contract (running the review you requested); legitimate interests (security, abuse prevention, product improvement, and providing a report to the other party of a review, which is the purpose of the service); consent (publication in the directory, and marketing email if you ever opt in); and legal obligations.

Who sees your data

• The other party to a review. A firm that submits an account sees the report; so does the trader who owns that account. A trader who orders a review of their own account decides whether to share it.
• Processors. Hosting, email delivery and payment providers who act on our instructions under contract.
• Authorities, when the law requires it.

We do not sell personal data and we do not share it with advertisers.

Retention

• Credentials. Investor passwords are deleted when a review is complete, unless the firm has asked for ongoing monitoring of that account.
• Reports. Reports are immutable by design and are kept for as long as their verification link is live, so both parties can rely on them.
• Account data. Kept while your account exists and for a short period afterwards.
• Logs. Typically 90 days.

Your rights

Depending on where you live you may have the right to access, correct, delete or export your personal data, to object to or restrict certain processing, and to complain to a supervisory authority. Write to [email protected] and we will answer within 30 days.

One limit is worth stating plainly: a report cannot be edited after issue, because its value depends on that. Where deletion is required, we remove the personal data from the report and keep only the hash needed to show that the original existed.

Security

Data is encrypted in transit and at rest, access is limited to the people who need it, and credentials are handled read-only. Details are on the security page.

International transfers

Our servers and processors may be located outside your country. Where required, we use recognised safeguards such as standard contractual clauses.

Changes

We will post changes to this policy on this page with a new date. Material changes will be announced to account holders by email.