Privacy Policy

In force from 16 September 2026

Who we are

Torvalio is operated by Clevik LLC, a New Mexico limited liability company, trading as Torvalio. We are the controller of the personal data described here.

What we collect, and why

Trading account credentials

Your broker password is never written to our database. There is no password, credential or token column in it, and a leak of our data could not expose your trading account.

The password you enter is passed to MetaApi, our connectivity provider, which holds it in order to keep your trading terminal connected between sessions. MetaTrader offers no scoped key or delegated access, so a stored credential is the only way a connection can persist. We ask for your investor (read-only) password, which cannot trade or withdraw.

Who else touches it

We use a small number of providers to run the service. They process data on our instructions and for no other purpose. We do not sell personal information, and we do not share it for advertising.

We may also disclose data where the law requires it, or to establish or defend legal claims.

Cookies

The only cookies we set are the ones that keep you signed in. Your session lives in a cookie which, when it is large, the sign-in library splits across more than one. There are no analytics, advertising or profiling cookies, so there is nothing to consent to and no banner to dismiss. Stripe sets its own cookies on the payment step for fraud prevention; those are governed by Stripe's privacy policy.

Legal bases

If you are in the EU or UK, we rely on:

• Performance of a contract, for everything needed to provide and bill for the service;
• Legitimate interests, for security, fault diagnosis and protecting the service against abuse;
• Consent, for push notifications and for any marketing email, each of which you can withdraw at any time;
• Legal obligation, for tax and accounting records.

How long we keep it

We keep your account data while you have an account. If you cancel, your history stays readable so that returning is instant. Ask us to delete your account and we will remove it and its trading history, and disconnect your trading accounts from our provider. Records we must keep for tax or accounting reasons are kept for as long as the law requires.

Your rights

You can ask us to give you a copy of your data, correct it, delete it, export it, restrict how we use it, or object to a use. If you are in the EU or UK you also have the right to complain to your data protection authority. If you are in California you may request the categories and specifics of information collected, ask for deletion, and you will never be treated differently for exercising those rights.

Email support@torvalio.com and we will do it. There is no form and no queue.

Where it is held

Our providers store and process data in the United States and, for some services, elsewhere. If you are in the EU or UK, that means your data is transferred outside your country; those transfers rely on the standard contractual clauses or equivalent safeguards our providers maintain.

Security

Data is encrypted in transit and at rest. Access to your records is enforced in the database itself, row by row, rather than only in the application. Profile pictures are held in a private store and served through short-lived signed links. No system is perfectly secure, but we have deliberately arranged things so that the most damaging thing we could lose — your broker password — is not ours to lose.

Children

Torvalio is not intended for anyone under 18 and we do not knowingly collect their data.

Changes

If we change this policy in a way that materially affects you, we will email you before it takes effect. The date at the top always shows the version in force.