Privacy Policy · 隐私协议

Strategy X-Ray (“we”) respects your privacy. This Privacy Policy explains how we collect, use, store, share, and protect personal information when you register, sign in, and use the Service at strategyx-ray.com and related applications. By using the Service, you acknowledge this Policy.

1. Information we collect

Depending on the features you use, we may collect:

• Account information: email address, password hash, verification records, display name, workspace or tenant identifiers.
• Authentication and security: login sessions, approximate device or browser information, IP address, verification results, and logs used to prevent abuse.
• Trading and monitoring data: account, position, deal, balance/equity, drawdown, Magic/strategy labels, and related business data you authorize via EA, cloud linking, or other integration methods.
• Product usage: feature usage, page views, error logs, and performance diagnostics to improve reliability.
• Communications: content you submit through feedback, support, or email.
• Payment-related information: if you purchase paid features, we may process order identifiers, plan details, and payment status; card numbers, crypto payout addresses, and similar sensitive payment credentials are typically handled by third-party payment processors (such as NOWPayments and, where enabled, fiat or card partners such as Banxa).

Google Sign-In and Google user data

If you choose Sign in with Google, we receive limited Google account identity information through Google’s OAuth / OpenID Connect flow (typically scopes such as openid, email, and profile). This section discloses how we access, use, store, and share that Google user data.

• Access: with your consent on Google’s consent screen, we receive your email address, a stable Google account identifier, and the basic profile fields Google returns for the approved scopes (which may include name, profile picture URL, or locale). We do not request access to Gmail, Google Drive, Google Calendar, or other Google products beyond login identity.
• Use: we use this information to create or sign in to your Strategy X-Ray account, link later Google sign-ins to the same local account, derive a local username, record your account email, and send essential account or security messages. We do not use Google Sign-In to place trades or to obtain MT4/MT5 or brokerage passwords.
• Storage: the Google account identifier, email address, and the basic user-information response returned by Google for the approved scopes are stored with your account identity record. That response may include fields such as name, profile picture URL, or locale. We retain these records while your account remains active (or as required by law) and apply access controls and encryption in transit.
• Sharing: we do not sell Google user data or share it with brokers or advertisers for marketing. Limited service providers (for example hosting, email delivery, or security logging) may process account and identity information only as needed to operate the Service, as described in “Sharing and processors” below. Trading and monitoring data is collected separately when you connect an MT4/MT5 account and is not obtained through Google.

Your use of Google Sign-In is also subject to Google’s terms and privacy policy. You may request account closure through the Account Security page or the contact channels in this Policy, subject to applicable retention rules.

2. How we use information

• Create and maintain your account, registration, login, and identity verification;
• Provide monitoring, reporting, alerts, workspace collaboration, and other core features;
• Protect security and prevent fraud, abuse, and unauthorized access;
• Send service messages you need (verification codes, security notices, important changes);
• Improve the product through aggregated or de-identified analytics where feasible;
• Comply with legal obligations and respond to lawful requests.

3. Cookies and local storage

We use cookies, local storage, or similar technologies for sessions, language preferences, and UI settings. You can manage cookies in your browser; disabling them may limit some features.

4. Sharing and processors

We do not sell your personal information. We may share or delegate processing only when:

• Service providers need data to host infrastructure, databases, email, payments, logging, or monitoring—limited to what is necessary;
• You authorize recipients, such as workspace members or viewers of data you share via links;
• Law requires disclosure for compliance, litigation, or valid government requests;
• Business transfer occurs (merger, acquisition, or asset sale), subject to continued protection consistent with this Policy.

5. International transfers

If information is processed in countries other than your own because of infrastructure or vendors, we use reasonable safeguards (such as contractual protections and access controls) consistent with applicable data-protection requirements.

6. Retention and security

We retain information for as long as needed for the purposes described here or as required by law. We apply reasonable technical and organizational measures (access control, encryption in transit, hashed passwords). No online service is completely secure; please protect your credentials.

7. Your rights

Where applicable law provides, you may request access, correction, export, or deletion of certain data; withdraw consent for non-essential processing; or request account closure from the App or web Account Security page (about a 14-day cooling-off period applies, during which you may cancel; after that the account is disabled and related data is cleaned up). We may verify your identity before fulfilling requests. Some data may remain in backups or as required for legal retention or dispute resolution.

8. Children

The Service is intended for users who can enter a binding agreement under applicable law. If you are under the age of majority, use the Service only with guardian consent and avoid submitting unnecessary personal information.

9. Third-party links and services

The Service may link to third-party sites, broker terminals, or payment pages. Those parties have their own privacy policies; we are not responsible for their practices.

10. Policy updates

We may update this Privacy Policy and will revise the date at the top of this page. Material changes will be communicated by reasonable means. Continued use after updates indicates acceptance of the revised Policy.

11. Contact

Questions, complaints, or privacy requests: use the in-product Feedback feature or contact channels published on strategyx-ray.com. We will respond within a reasonable time.

Strategy X-Ray（以下简称「我们」）重视您的隐私。本《隐私协议》说明我们在您注册、登录与使用本服务过程中，如何收集、使用、存储、共享与保护个人信息。使用本服务即表示您已阅读并理解本协议相关安排。

1. 我们收集的信息

根据您使用的功能，我们可能收集以下类别信息：

• 账户信息：邮箱、密码哈希、验证码校验相关记录、显示名称、工作区/租户标识等。
• 认证与安全信息：登录会话、设备/浏览器大致信息、IP、安全验证（如验证码）结果、异常登录防护日志。
• 交易与监控相关数据：您通过 EA 客户端、云端接入或其他授权方式同步的账户、持仓、成交、净值/余额、回撤、Magic/策略标识等业务数据。
• 产品使用数据：功能使用情况、页面访问、错误日志、性能诊断信息，用于改进服务与排查故障。
• 通信内容：您提交的反馈、工单或邮件沟通内容。
• 支付相关信息：若您购买付费功能，我们可能处理订单号、套餐、支付状态等计费信息；银行卡号、加密货币收款地址等敏感支付凭据通常由第三方支付服务商（如 NOWPayments 及我们启用的 Banxa 等合作伙伴）处理。

Google 登录与 Google 用户数据

若您选择使用 Google 登录（Sign in with Google），我们将通过 Google 的 OAuth / OpenID Connect 流程接收有限的 Google 账号身份信息（通常涉及 openid、email、profile 等范围）。本节说明我们如何访问、使用、存储与共享此类 Google 用户数据。

• 访问：在您于 Google 授权页同意后，我们会收到您的电子邮箱、稳定的 Google 账号标识，以及 Google 针对已授权范围返回的基础资料字段（可能包括名称、头像地址或语言地区）。我们不会请求访问 Gmail、Google Drive、Google Calendar 或其他超出登录身份所需的 Google 产品数据。
• 使用：我们使用这些信息创建或登录您的 Strategy X-Ray 账户、将后续 Google 登录关联至同一本地账户、生成本地用户名、记录账户邮箱，以及发送必要的账户或安全相关通知。我们不会通过 Google 登录代您下单交易，也不会借此获取 MT4/MT5 或经纪商密码。
• 存储：Google 账号标识、电子邮箱，以及 Google 针对已授权范围返回的基础用户信息响应，会与您的账户身份记录一并保存。该响应可能包含名称、头像地址或语言地区等字段。我们在账户存续期间或法律法规要求的期限内保留这些记录，并采取访问控制与传输加密等措施。
• 共享：我们不会出售 Google 用户数据，也不会将其提供给经纪商或广告商用于营销。有限的服务提供商（如主机、邮件发送、安全日志）可能仅为运营本服务之必要处理账户与身份信息，详见下文「共享与委托处理」。交易与监控数据仅在您另行接入 MT4/MT5 账户后收集，并非通过 Google 获得。

使用 Google 登录同时受 Google 自身条款与隐私政策约束。您可通过「账户安全」页面或本协议载明的联系方式申请关闭账户（仍受适用的保留规则约束）。

2. 我们如何使用信息

• 创建与维护账户，完成注册、登录与身份验证；
• 提供绩效监控、报表、预警、工作区协作等核心功能；
• 保障安全，防范欺诈、滥用与未授权访问；
• 发送必要的服务通知（如验证码、安全提醒、重要变更）；
• 改进产品体验、统计与故障排查（在可行范围内做去标识化或聚合）；
• 履行法律法规要求，或响应合法合规请求。

3. Cookie 与本地存储

我们可能使用 Cookie、LocalStorage 或类似技术保存会话、语言偏好、界面设置等，以维持登录状态与改善体验。您可通过浏览器设置管理 Cookie；禁用后部分功能可能不可用。

4. 共享与委托处理

我们不会出售您的个人信息。仅在以下情形可能共享或委托处理：

• 服务提供商：如云主机、数据库、邮件发送、支付、日志与监控服务，且仅限于提供服务所必需的范围；
• 您主动授权的对象：例如您加入的工作区、分享链接的接收方可见您授权范围内的数据；
• 法律要求：为遵守法律法规、诉讼或政府机关依法提出的要求；
• 业务承继：如合并、收购或资产转让，我们将要求承继方继续受本协议或同等保护约束。

5. 跨境传输

若因基础设施或服务商部署导致信息在境外处理，我们将采取合理措施（如合同约定、安全控制）以保护您的信息，并遵守适用的数据保护要求。

6. 存储期限与安全

我们在实现本协议所述目的所必需的期限内保留信息，或在法律要求的更长期限内保留。我们将采取合理的技术与组织措施（如访问控制、传输加密、密码哈希存储）保护信息安全。但互联网环境并非绝对安全，请您同时妥善保管账户凭证。

7. 您的权利

在适用法律允许的范围内，您可以：

• 查询、更正您的账户资料；
• 导出或删除部分业务数据（视功能支持情况而定）；
• 在 App 或网页「账号安全」中申请注销账户（提交后进入约 14 天冷静期，期间可取消；期满后将停用并清理账号相关数据）；
• 撤回非必要处理的同意（不影响撤回前基于同意的处理效力）。

为保障安全，我们可能在处理请求前验证您的身份。部分数据可能因法定留存、争议解决或技术备份而在合理期限内继续保存。

8. 未成年人

本服务面向具备完全民事行为能力的用户。若您未满法定成年年龄，请在监护人同意与指导下使用，并勿提交超出必要范围的个人信息。

9. 第三方链接与服务

本服务可能包含第三方网站、券商终端或支付页面的链接。该等第三方有独立的隐私政策，其处理行为不受本协议约束。请您在使用前查阅其说明。

10. 协议更新

我们可能更新本隐私协议，并在本页面公布更新日期。重大变更将通过合理方式提示。若您在更新后继续使用本服务，即表示理解更新后的安排。

11. 联系我们

如对本隐私协议或个人信息处理有疑问、投诉或权利请求，请通过产品内「反馈」功能或官网公布的联系方式与我们联系。我们将在合理期限内予以回复。