Legal & Privacy Center

Control Trading Lab ("Control Trading", "we", "us", or "our") is dedicated to protecting your personal data and ensuring full compliance with the European Union General Data Protection Regulation (Regulation (EU) 2016/679 - "GDPR") and the ePrivacy Directive (Directive 2002/58/EC as amended).

1. Service Operator & Hosting Infrastructure Provider

2. Categories of Personal Data We Process

We process only data strictly necessary to operate, maintain, and secure the software platform:

• Account & Authentication Data: Username, email address, password hash (one-way cryptographically hashed using standard secure hashing algorithms; passwords are never stored in plaintext), and system digital user ID.
• Subscription & Payment Data: Processed exclusively by Paddle.com (Merchant of Record). We receive customer identifiers, subscription plan tier (Free, Basic, Pro), subscription status, and invoice timestamps. We never collect, receive, or store your credit card numbers or banking secrets.
• Referral Discount Attribution: Referral codes, referring user IDs, and referral points balance to calculate applicable discounts.
• Security & Audit Logs: IP address, browser user-agent, operating system, and login timestamps to enforce rate limiting, session authentication, and protection against unauthorized or abusive access.
• Trading Workspace & Strategy Data: User-created trading strategies, backtest simulation parameters, historical test outputs, and user-provided exchange API keys (which must strictly be restricted to READ and TRADE permissions only).
• First-Party Privacy-Preserving Web Analytics: Only if you grant explicit prior consent, we process daily rotating cryptographic hashes (sha256(ip + daily_salt + ua)), visited paths, time on page, and referral sources. No raw IP addresses are stored in our analytics database.

3. Purposes and Legal Bases (GDPR Article 6)

4. Cookies and Storage Policy

In accordance with the ePrivacy Directive and GDPR, non-essential cookies and tracking scripts are blocked by default until you grant affirmative, informed consent.

You can update or withdraw your cookie consent at any time by clicking the Cookie Preferences link in our footer.

5. Third-Party Service Providers

We do not sell, rent, or trade your personal data. We share data solely with trusted infrastructure service providers:

• OVHcloud (OVH SAS): Dedicated server hosting and database storage located in France (European Union).
• Paddle.com (Paddle Payments Ltd / Paddle.com Inc): Authorized Merchant of Record for order processing, sales tax (VAT) compliance, and subscription billing.
• Transactional Email Delivery: Secure SMTP email delivery for account activation and password resets.

6. Data Retention Periods

• Account Data: Retained while your account remains active. Permanently deleted within 30 days upon confirmed account deletion.
• Billing Invoices: Retained for statutory periods required by applicable commercial and tax accounting laws.
• Security Logs: Purged on a rolling 90-day retention schedule.
• Analytics Records: Raw tracking pings are purged after 90 days; daily aggregated statistics contain no personal identifiers.

7. Your Statutory Rights Under the GDPR

Under Articles 15 to 22 of Regulation (EU) 2016/679, you have the right to:

• Access (Art. 15): Request a copy of your personal data held by us.
• Rectification (Art. 16): Request correction of inaccurate personal data.
• Erasure (Art. 17): Request deletion of your account and personal data.
• Restriction (Art. 18): Request temporary limitation of processing.
• Data Portability (Art. 20): Receive your personal strategy data in a structured, standard format.
• Object (Art. 21): Object to processing based on legitimate interests.
• Withdraw Consent (Art. 7(3)): Withdraw consent at any time without affecting past lawful processing.

To exercise any of these rights, email us at privacy@ctrl.trading. We respond within thirty (30) days without charge.

You also have the right to lodge a complaint with a supervisory data protection authority in the European Union (in France, this is the CNIL: www.cnil.fr).

Please review these Terms of Service ("Terms") carefully before using the software and web applications operated by Control Trading Lab ("Control Trading", "CTRL", "we", "us", or "our") accessible at www.ctrl.trading and lab.ctrl.trading.

1. Service Operator and Binding Agreement

These Terms constitute a binding legal agreement between you ("User", "you") and Control Trading Lab (operating www.ctrl.trading and lab.ctrl.trading, hosted by OVHcloud in France, European Union). Contact: legal@ctrl.trading.

By creating an account, accessing our Web Lab, or subscribing to our plans, you agree to be bound by these Terms and our Privacy Policy. If you do not agree to these Terms, you must not access or use the platform.

2. Description of the Services

Control Trading Lab provides a cloud-based algorithmic trading laboratory designed for strategy development, quantitative backtesting against historical market tick databases, indicator calculation, and optional trade execution connectors.

Features vary according to your subscription tier (Free / Launch Waitlist, Basic, and Pro). We reserve the right to improve, modify, or deprecate features to maintain platform performance, legal compliance, and technological standards.

3. Third-Party Exchange Integrations & API Keys

If you connect third-party cryptocurrency exchanges (e.g., Binance, OKX) via API keys:

• You must configure API keys with READ and TRADE permissions only.
• NEVER ENABLE WITHDRAWAL OR TRANSFER PERMISSIONS. Control Trading Lab will never ask for withdrawal permissions and disclaims all liability for losses resulting from keys configured with withdrawal rights.
• You are solely responsible for maintaining, monitoring, and revoking API keys directly with your exchange provider.

4. Subscriptions, Payments & Paddle Merchant of Record

All payment processing and order execution are performed by our authorized Merchant of Record, Paddle.com Inc / Paddle Payments Ltd ("Paddle").

• Merchant of Record: Paddle acts as the merchant of record for all purchases, managing payment fulfillment, billing support, and applicable statutory taxes (including EU VAT).
• Recurring Billing: Paid subscriptions (Basic and Pro) are billed in advance on a recurring monthly or annual basis. Your subscription will automatically renew at the conclusion of each billing cycle unless cancelled prior to renewal.
• Cancellation: You may cancel your subscription at any time directly through your Account Settings or via the Paddle customer portal. Upon cancellation, your access remains active until the end of your current paid billing period.
• EU Statutory Right of Withdrawal: Under Article 16(m) of EU Directive 2011/83/EU, when you subscribe to digital software content with immediate access, you expressly request immediate performance and acknowledge that your 14-day statutory right of withdrawal is waived once access to the digital services has commenced.

5. Referral & Promotional Discount Program

• Referred new users who register with a valid referral code receive a 10% discount on their subscription.
• The referring account is credited with 10 referral points once the referred account completes verified email activation.
• Anti-Abuse Rule: Self-referral, fraudulent accounts, automated bots, and misleading spam advertising are strictly prohibited and will result in revocation of points and account suspension.

6. Intellectual Property & Strategy Ownership

• Your Proprietary Code: You retain 100% exclusive intellectual property ownership of all custom trading strategies, algorithms, proprietary parameters, and mathematical formulas you create on the platform. Control Trading Lab does not claim ownership or rights over your trading code.
• Platform Property: The platform architecture, user interfaces, backtesting engine, database structures, documentation, visual design, and software libraries belong to Control Trading Lab.

7. Limitation of Liability & Warranties

To the maximum extent permitted under applicable law, the software is provided "AS IS" and "AS AVAILABLE", without warranties of any kind.

Control Trading Lab shall not be liable for any indirect, incidental, special, or consequential damages, including loss of profits, loss of data, slippage, unexpected order execution by exchanges, network latency, or exchange downtime. Our aggregate liability shall not exceed the total amount paid by you to Control Trading Lab in the twelve (12) months preceding the incident.

8. Governing Law and Jurisdiction

These Terms shall be governed by and construed in accordance with the laws of France, without depriving consumers residing in other EU Member States of mandatory protective statutory rights under their local legislation.

In the event of a dispute, parties agree to attempt amicable resolution. Unresolved disputes shall be submitted to the competent courts of France or the competent consumer court of the user's domicile.