Privacy Policy

MQ45 is a read-only risk-management and trading-psychology companion for retail traders on MetaTrader 5 and cTrader. It watches a trading account you choose to connect and alerts you to account-killing behaviour while it is happening. MQ45 cannot place, modify or close a trade — it has no technical ability to do so.

Account identity. The email address you sign up with, your name, country and timezone, and your sign-in sessions (device, IP address, and coarse location as reported by our hosting provider).

Broker credentials. For MetaTrader 5, the read-only investor password of the account you connect. For cTrader, OAuth tokens granted by you on Spotware's own site. Credentials are encrypted with AES-256-GCM before they are stored, and are used only to read your account.

Trading data. Balances, positions, orders, deals and account events, read from your connected accounts so the product can do its job.

Billing. Your plan and payment status. Card and crypto payment details are handled by our payment processors (Stripe and NOWPayments) — MQ45 never sees or stores your card number.

Notifications. The push tokens of devices you allow notifications on, and your notification preferences.

Cookies. A theme preference and your cookie-consent choice. No advertising or tracking cookies exist on MQ45.

To sync and present your trading account to you, to evaluate risk rules and deliver alerts (in-app, push and email), to run your subscription, to answer support requests, and to prevent abuse of the platform.

We do not sell, rent or share your data with advertisers, data brokers or signal services. Your trading data is never used to trade against you, and is never shared with other users except where you explicitly publish a track-record link — which only you can create and only you can revoke.

Supabase (authentication, database and realtime delivery), Vercel (application hosting), Stripe and NOWPayments (payments), Resend (transactional email), Expo and Firebase Cloud Messaging (push notifications), and Spotware (cTrader OAuth authorization). Each processes only what its role requires.

Your data is kept while your account exists. Deleting your MQ45 account — from Settings in the app — removes you and everything under it: connected accounts, credentials, trades, alerts, chat threads, sessions and settings. The deletion is immediate and verified by typing your email back.

You can also disconnect a trading account at any time, revoke cTrader access from your cTrader ID, or change your MT5 investor password, and our access ends with it.

Credentials are encrypted at rest with AES-256-GCM and travel only over TLS. Broker connections are read-only by construction: MT5 uses the investor (view-only) password, and cTrader access is scoped to account viewing. Even with full access to our systems, no one can trade your account.

If this policy changes, the change appears here before it takes effect. Questions about your data: privacy@mq45.com.