Privacy Policy

Last updated: 11 July 2026

Satis Omnibus ("we", "us", "our") respects your privacy. This policy explains what data we collect, why, and how we protect it. We comply with the New Zealand Privacy Act 2020 and the EU General Data Protection Regulation (GDPR).

1. Data We Collect

Data	Purpose	Retention
Email address	Account login, notifications	Until account deletion
Name (optional)	Display in dashboard	Until account deletion
Password	Authentication (stored as bcrypt hash — we never see your password)	Until account deletion
Broker API keys	Trade execution on your behalf (encrypted with AES-256-GCM)	Until you delete them
Trade history	Performance tracking, P&L display	Until account deletion
Payment info	Subscription billing (processed by Stripe — we never see your card number)	Managed by Stripe
IP address	Rate limiting, security	Not stored permanently

2. Data We Do NOT Collect

• We do not track you with cookies (no analytics cookies, no ad cookies)
• We do not sell, rent, or share your data with third parties
• We do not access your broker account balance or withdrawal capabilities
• We do not store your credit card details (Stripe handles all payment processing)

3. How We Protect Your Data

• Passwords: Hashed with bcrypt (12 rounds) — irreversible, cannot be read even by us
• Broker API keys: Encrypted with AES-256-GCM before storage, decrypted only momentarily during trade execution
• Transport: All connections use HTTPS/TLS encryption
• Access: Only you can view or delete your data via your authenticated dashboard

4. Third-Party Services

We use the following third-party services:

• Stripe — payment processing (see Stripe's Privacy Policy)
• Your broker (Swyftx, CMC Markets, etc.) — trade execution via API keys you provide

We do not use Google Analytics, Facebook Pixel, or any advertising trackers.

5. Your Rights

Under the GDPR and NZ Privacy Act, you have the right to:

• Access — view all data we hold about you (visible in your dashboard)
• Rectification — update your email or name at any time
• Deletion — request complete account deletion by emailing us
• Portability — request an export of your trade history
• Withdraw consent — delete your broker keys or cancel your subscription at any time

6. Data Breach Notification

In the unlikely event of a data breach affecting your personal information, we will notify you via email within 72 hours of discovery and notify the relevant authorities as required by law.

7. Children

The Service is not intended for anyone under 18 years of age. We do not knowingly collect data from minors.

8. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via email. The "Last updated" date at the top reflects the most recent revision.

9. Contact

For privacy-related questions or to exercise your rights, contact us at support@satisomnibus.com.