Business Liaison Private Limited, operating the TRAXAU brand (“TRAXAU”, “we”, “us” or “our”), respects your privacy. This Privacy Policy describes our handling of personal data when you visit www.traxau.com, use TRAXAU services, communicate with us, or otherwise interact with our products.
Who controls your data
Business Liaison Private Limited is the data controller or organisation responsible for personal data described in this policy, unless a feature-specific notice states otherwise. We are based in Singapore and apply the Singapore Personal Data Protection Act 2012 (“PDPA”). TRAXAU is initially supported in Singapore only. If we later offer the services in another country, mandatory local privacy laws may also apply.
Questions and data-rights requests may be sent to our privacy contact at privacy@traxau.com.
What this policy covers
This policy covers the TRAXAU public website, account and subscription experiences, XAU/USD decision and risk workspaces, journals, analytics, reports, support channels, and AI-assisted A.G.O.R.A. and S.A.G.E.S. features.
It does not govern independent websites, brokers, trading platforms, payment providers or other third parties that you choose to use. Their own privacy notices apply to their services.
Personal data we collect
Account and identity data
Name, email address, country or region, account identifiers, authentication records, preferences and eligibility information.
Service and journal data
User-originated trade plans, risk rules, journal entries, notes, uploaded material, account-level metrics, review history and outputs generated through the services.
Subscription data
Plan, billing status, transaction references and limited payment-related information. Full payment-card details are normally processed by an authorised payment provider rather than stored by TRAXAU.
Communications
Support requests, feedback, survey responses, correspondence and records of choices or consent you provide.
Technical and usage data
IP address, device and browser type, operating system, timestamps, referring pages, pages or features used, diagnostic events, security logs and cookie identifiers.
Information from integrations
If you enable an approved integration, we may receive the account, trade or execution information described at connection time. We do not require your broker password through ordinary website or journal fields.
Please do not place passwords, private keys, seed phrases, payment-card details or unrelated sensitive information into free-text fields.
How and why we use data
We use personal data to provide and secure the services; create and administer accounts; process subscriptions; generate user-requested reviews, analytics and reports; remember settings; respond to support and feedback; prevent fraud and misuse; diagnose performance; comply with legal obligations; enforce our terms; and improve product reliability and usability.
Where GDPR or UK GDPR applies, our legal bases may include performance of a contract, compliance with law, our legitimate interests in operating and securing TRAXAU, and consent where required. You may withdraw consent for future processing at any time, but withdrawal does not affect processing already carried out lawfully.
We do not sell personal data. We do not use private journal content for third-party behavioural advertising.
AI-assisted features
When you use A.G.O.R.A., S.A.G.E.S. or another AI-assisted feature, relevant inputs and service context may be processed to produce the response you requested, maintain safety, detect misuse and improve service quality. We may use contracted technology providers acting under our instructions to support this processing.
TRAXAU’s outputs support the review of user-originated XAU/USD decisions. They do not make a decision that produces legal or similarly significant effects about you, execute trades, manage funds, or replace your own judgement. Do not submit information about another person unless you are authorised to do so.
International data transfers
TRAXAU is operated from Singapore and may use providers or infrastructure located in other countries. Where personal data is transferred internationally, we take steps intended to ensure a standard of protection comparable to applicable law. These may include contractual protections, transfer assessments and recognised safeguards such as standard contractual clauses where appropriate.
How long we retain data
We retain personal data only for as long as reasonably necessary for the purposes described in this policy, including providing your account and journal history, meeting legal or accounting duties, resolving disputes, preventing abuse and maintaining security. Retention depends on the data type, account status, sensitivity, legal requirements and whether deletion would impair legitimate records.
When information is no longer required, we delete or anonymise it, subject to limited backup cycles and records we must retain by law. You may request account deletion, but some information may be retained where a lawful exception applies.
How we protect data
We use administrative, technical and organisational measures designed to protect personal data against unauthorised access, disclosure, alteration, loss or destruction. Measures are selected according to risk and may include access controls, encryption, logging, secure development practices, backups and service-provider reviews.
No internet service is completely secure. You are responsible for protecting your credentials, using a strong unique password and notifying us if you suspect unauthorised account access.
Your privacy rights
Depending on applicable law, you may have rights to request access to personal data, correct inaccurate data, withdraw consent, request deletion or restriction, object to certain processing, receive portable data, and lodge a complaint with a privacy regulator. Singapore users may request access or correction and withdraw consent in accordance with the PDPA.
Send requests to privacy@traxau.com. We may verify your identity before acting, and legal exceptions may apply. We will respond within the period required by applicable law. You may also contact Singapore’s Personal Data Protection Commission.
Age restrictions
TRAXAU is intended for adults aged 18 or older. We do not knowingly collect personal data from children. If you believe a child has provided personal data to us, contact us so we can investigate and take appropriate action.
Changes to this policy
We may update this policy as our services, providers or legal obligations change. The revised version will be posted here with an updated date. If a change materially affects how we handle personal data, we will provide additional notice where required.
Contact us
Business Liaison Private Limited
Operating the TRAXAU brand
Singapore