Privacy Policy

1. Controller

NEXOBOTIC LTD
Registration no. HE 429230 (Republic of Cyprus)
Tepeleniou 13, Tepelenio Court, Floor 2
8010 Paphos, Cyprus
Email: audits@eaverdict.com

2. What we process, and why

• Order and payment data. Checkout runs on Stripe (Managed Payments): Stripe collects your email, billing country and payment details and shares with us your email and order metadata. We never see card numbers. Legal basis: performance of contract. See Stripe's privacy policy.
• Uploaded tester files. Reports and logs you upload are stored in Cloudflare R2 (EU jurisdiction safeguards via standard contractual mechanisms) under a random ID and processed to produce your audit. We discard the file name and remove your MT5 account number from the report before storing it, and account numbers never appear in an audit or a statistic. Aggregated, anonymized statistics may power our benchmarks. Legal bases: performance of contract; legitimate interest in improving the methodology (aggregated data only).
• Email. Purchase confirmations are sent via Cloudflare Email Sending from audits@eaverdict.com; replies and inbound mail to audits@eaverdict.com are routed via Cloudflare Email Routing to a mailbox operated by Microsoft (Outlook). Legal basis: performance of contract; answering your requests.
• Email course and newsletter. If you sign up, we store your email address, your course progress, which headline you signed up under and the EAs you chose to follow in Cloudflare (Workers KV) and send the mails via Cloudflare Email Sending. Sign-up is double opt-in: nothing is sent beyond the confirmation mail until you confirm, and an unconfirmed sign-up is deleted after 48 hours. Every mail carries an unsubscribe link; unsubscribing deletes your address. The sign-up box shows one of two headlines; your browser remembers which (local storage, no cookie), and we count how often each headline is shown, without any personal data. Legal basis: consent.
• Audit library and lifetime access. So that your purchases stay available to you, we store your email address together with what you bought (audit identifiers and time of purchase) and, for lifetime access, its start date in Cloudflare (Workers KV). Legal basis: performance of contract. Kept as long as we provide the access (for lifetime access, as long as we operate the catalog); order records beyond that as tax and company law require.
• Business requests. If you write to us as a prop firm or other business, we keep your email with what you describe (firm, role, rule set, use case) in our mailbox. Legal basis: steps prior to a contract at your request. Kept until your request is settled; deleted earlier on request.
• Telegram verdict bot. If you ask our bot on Telegram, Telegram passes your message to us. We log the time, the text of the query (at most 200 characters), whether an audit was found and the chat type, but not your Telegram name or ID. Telegram itself acts under its own privacy policy. Legal basis: legitimate interest in improving the lookup.
• Monitoring reports. For a monitoring order you send an MT5 account report by email reply (or give read-only investor access), so it reaches the mailbox named above. From it we store the trade positions and the account's deal and balance history (amounts, times, deposits and withdrawals, currency, leverage); your name, account number and broker are not stored, the account number only as a salted hash so that a change of account shows, and the original file is deleted after intake. An investor password is never entered into our records. The order record (email, payment time) is kept in Cloudflare R2. Legal basis: performance of contract.
• Hosting and logs. The site is served by Cloudflare Pages; Cloudflare processes technical request data (IP address, user agent) for delivery and security. Legal basis: legitimate interest in secure operation.

3. Cookies and tracking

This site sets no tracking cookies and runs no third-party analytics. The free browser check parses your files locally in your browser; your files are uploaded only when you press the order button, just before checkout; an upload without a completed order is deleted automatically after 14 days. Stripe's checkout pages set their own cookies as described in Stripe's policy.

4. Processors and transfers

Processors: Stripe (payments), Cloudflare (hosting, storage, email), Microsoft (mailbox). Telegram is involved only if you use our bot and processes your messages under its own policy. Where data leaves the EU/EEA, transfers rely on adequacy decisions or standard contractual clauses of the respective provider.

5. Retention

Order records are kept as long as tax and company law require. Uploaded files of an order are kept until you ask us to delete them, so we can answer questions about your audit; an upload without a completed order is deleted automatically after 14 days. You can request deletion of your uploads at any time (audits already delivered remain available to you). Monitoring data (trade positions, deal and balance history, and the account hash) is kept for the period agreed with you when monitoring starts and then deleted, with a deletion receipt; the copy of your report in our mailbox is deleted on request.

6. Your rights

You have the rights of access, rectification, erasure, restriction, portability and objection under the GDPR. Contact: audits@eaverdict.com. You may lodge a complaint with a supervisory authority; for Cyprus, this is the Commissioner for Personal Data Protection.

7. YouTube API Services

EA Verdict uses the YouTube API Services for one purpose: to upload short videos about our own audits to our own YouTube channel (@eaverdict) and to read that channel's aggregate view, like and comment counts for internal reporting. Only EA Verdict authorizes this access, for its own channel. Visitors of this site and viewers of our videos never connect a Google or YouTube account to EA Verdict, and we do not access, collect, store or share YouTube or Google account data of anyone else.

• By watching or interacting with our videos on YouTube you are bound by the YouTube Terms of Service. Google processes data as described in the Google Privacy Policy.
• The only credential we keep is the authorization token for our own channel, stored outside this website. Channel statistics retrieved through the API are used for internal reports and are refreshed or deleted within 30 days.
• The authorization can be revoked at any time through the Google security settings; the stored token is then deleted. Questions: audits@eaverdict.com.