Privacy Policy

Effective October 4, 2026

This policy explains how Spectre International Ltd. ("Spectre", "we", "us") collects, uses and protects information when you use our websites (spectre.ltd and spectre.markets) and our mobile application SPECTRE Desk for iOS and Android (together, the "Services").

Information we collect

• Account information – your email address, name (if provided) and the authentication data needed to sign you in. Passwords are stored only as salted cryptographic hashes.
• Device information – for SPECTRE Desk, an app-generated device identifier, a device public key used to secure your session (the private key never leaves your device's secure hardware), device model, operating-system version and app version.
• Push notification tokens – if you allow notifications, we receive a token from Apple Push Notification service (iOS) or Google Firebase Cloud Messaging (Android) so we can deliver the alerts you have enabled.
• Usage and diagnostic data – server logs such as IP address, request time and error information, used for security and reliability.
• Trading and strategy data – information you choose to connect to or view in the Services, such as positions, orders and alerts associated with your account.

Biometric unlock (Face ID, Touch ID or fingerprint) is handled entirely by your device's operating system. We never receive or store biometric data.

How we use information

• To provide, secure and maintain the Services, including signing you in and protecting your session.
• To send the notifications you have enabled, such as trade, risk and system alerts.
• To respond to support requests and communicate with you about your account.
• To detect, prevent and investigate abuse, fraud and security incidents.
• To comply with legal obligations.

Service providers

We use carefully selected providers to operate the Services, including Cloudflare (network security and delivery), Google Firebase Cloud Messaging and Apple Push Notification service (notification delivery), and authentication and hosting providers. They process information only on our instructions and only for these purposes.

We do not sell your data

We do not sell, rent or trade your personal information, and we do not use it for third-party advertising.

Retention

We keep personal information only as long as needed for the purposes above or as required by law. When you delete your account, we delete or anonymise your personal information within 30 days, except where we must retain it for legal, security or accounting reasons.

Security

We use encryption in transit (TLS), hashed credentials, device-bound session keys and access controls to protect your information. No system is perfectly secure, but we work continuously to protect your data and will notify you of a breach where required by law.

Your rights and choices

You may request access to, correction of, or deletion of your personal information, and you can turn notifications off at any time in the app or your device settings. Canadian residents have rights under the Personal Information Protection and Electronic Documents Act (PIPEDA). To make a request, or to ask that your account be deleted, email [email protected]. You may also contact the Office of the Privacy Commissioner of Canada.

Children

The Services are not intended for anyone under 18, and we do not knowingly collect information from children.

International transfers

Your information may be processed in Canada, the United States and other countries where our service providers operate, with appropriate safeguards in place.

Changes to this policy

We may update this policy from time to time. We will post the new version here with a new effective date and, for material changes, notify you in the app or by email.

Contact

Spectre International Ltd., Toronto, Ontario, Canada – [email protected]