Privacy Policy

Last updated: April 2026

1. Who we are

Kinjiyudo is a personal trading automation platform. For the purposes of UK data protection law, the operator of this platform is the data controller for personal data collected through this service.

2. Data we collect

We collect and process the following personal data:

  • Account information: your name and email address, provided at registration.
  • IG account credentials: your IG login, API key, and account ID, provided when adding a trading account. These are stored encrypted at rest.
  • Trading data: trading plans, transaction history, and bot configuration associated with your account.
  • Consent records: the date and time you agreed to our risk disclaimer at registration.
  • Session data: a session cookie used to keep you logged in during use of the platform.

3. How we use your data

Your data is used solely to provide and operate the Kinjiyudo platform. Specifically:

  • To authenticate you and maintain your session.
  • To connect to the IG API on your behalf and execute your configured trading strategies.
  • To display your trading plans, positions, and performance data.
  • To send account verification emails.
  • To maintain records of consent for regulatory and compliance purposes.

We do not use your data for marketing, advertising, or any purpose other than operating the platform.

4. Legal basis for processing

We process your personal data on the basis of contractual necessity (to provide the service you have registered for) and legitimate interests (to maintain security, prevent fraud, and keep compliance records).

5. Data storage and security

Your data is stored on Amazon Web Services (AWS) infrastructure located within the EU/UK. Sensitive credentials (IG login, password, API key, and account ID) are encrypted at rest. Passwords are hashed and never stored in plain text. Access to the platform and its data stores is restricted to authorised personnel only.

6. Data sharing

We do not sell, rent, or share your personal data with third parties except as strictly necessary to operate the platform:

  • IG Group: your credentials are transmitted to the IG API solely to execute your configured strategies on your behalf.
  • AWS: data is stored and processed on AWS cloud infrastructure.

7. Data retention

We retain your personal data for as long as your account is active. If you request deletion of your account, your personal data will be deleted within 30 days except where retention is required by law or for the resolution of disputes.

8. Your rights

Under UK GDPR you have the right to:

  • Access the personal data we hold about you.
  • Correct inaccurate or incomplete data.
  • Request deletion of your data ("right to be forgotten").
  • Restrict or object to processing of your data.
  • Data portability — receive your data in a structured, machine-readable format.
  • Lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

9. Cookies

We use a single session cookie, strictly necessary for authentication. No tracking or advertising cookies are used. See our Cookie Policy for details.

10. Changes to this policy

We may update this policy from time to time. Material changes will be communicated via the platform. Continued use of the platform following notification of changes constitutes acceptance of the updated policy.