Privacy Policy

1. Controller

CitadeLab is the controller of personal data described in this policy. We process data in line with the Nigeria Data Protection Act 2023 and, where applicable, other data-protection laws that apply to you. Contact: samolubunmi202@gmail.com.

2. Data we collect

You give us

• Checkout details: name, email address and (optionally) WhatsApp number.
• Onboarding details: MT5 account login number, server name and password for accounts you want automated; your prop firm and its rule set; account size.
• Communications: messages you send us by email, WhatsApp, Telegram or live chat.

Collected automatically

• Trading-account data on accounts we operate for you: balances, positions, orders, trade history and EA logs, used to run, monitor and support the service.
• Basic technical data such as IP address, browser type and request logs, kept by our hosting provider for security and reliability.

From our payment partner

Bachs processes your payment and tells us its outcome (for example, amount, currency, status and a checkout reference). We do not receive or store your full card number or bank login.

3. How we use it

• To process your order and activate your subscription (performance of a contract).
• To configure, run, monitor and maintain the EA on your trading accounts (performance of a contract).
• To provide support and send service messages about your account (performance of a contract).
• To prevent fraud, secure our systems and enforce our Terms (legitimate interests).
• To keep financial records required by law (legal obligation).
• To send product news or offers, only where you have agreed; you can opt out at any time (consent).

4. How we protect your trading credentials

MT5 passwords are used only to log the EA in to your account on our servers. We restrict access to a small number of team members who need it, keep servers locked down to administrative access, and never ask for your prop-firm dashboard login, email password or bank details. Where your broker offers it, you can change your trading password after the service ends.

5. Who we share data with

We do not sell your personal data. We share it only with:

• Bachs, our payment processor, to take payment.
• Infrastructure providers (cloud hosting and website hosting) that store or process data on our behalf under confidentiality and security obligations.
• Your broker or prop firm, only to the extent that operating your account necessarily involves them.
• Authorities, where required by law or to protect our rights.

6. International transfers

Our servers and service providers may be located outside Nigeria (for example in North America or Europe). Where we transfer data abroad we rely on appropriate safeguards required by applicable law.

7. Retention

• MT5 passwords: deleted from our systems within 30 days after the service on that account ends.
• Trade and EA logs: kept for up to 24 months for support, troubleshooting and dispute handling.
• Payment and invoice records: kept for as long as tax and accounting law requires.
• Communications: kept while you are a customer and for up to 24 months afterwards.

8. Cookies

This website does not use advertising or analytics cookies. Our payment partner's checkout page may set cookies necessary for secure payment, under its own policy.

9. Your rights

You can ask to access, correct, delete or receive a copy of your personal data, object to or restrict certain processing, and withdraw consent at any time. Email samolubunmi202@gmail.com. We will respond within the time limits set by law. You also have the right to complain to the Nigeria Data Protection Commission or your local data-protection authority.

10. Children

The service is not intended for anyone under 18, and we do not knowingly collect their data.

11. Changes

We may update this policy. The "Last updated" date above shows the current version; material changes will be communicated to active customers.