Privacy Policy

1. Who we are

CAEAutomations is a software studio operated by Camilo Estrella as a sole trader based in Guyana. We build automation software, trading bots, and web and mobile applications, and we sell trading bot subscriptions through this website. The bot is a hosted service: it runs on servers we operate, on your instructions.

Trading address: Remote, Guyana. For anything in this policy, including any request about your personal data, contact support@caeautomations.com.

We are the data controller for the personal data described here. This policy covers this website and the bot store. The Ryder Guyana rideshare platform has its own policy, which you can read at Ryder Guyana Privacy Policy.

2. What we collect, and why

We only collect what a specific task actually needs. Nothing here is collected for advertising or profiling.

When you contact us or book a demo

• Your name and email address, so we can reply.
• Your phone number and company name, if you choose to give them.
• The project description, budget range and timeline you enter, so we can answer usefully.

When you buy a bot subscription or register an account

• Your name and email address, to create the account and attach your subscription to it.
• Your country, for tax and sanctions screening.
• An account password, stored only as a salted hash. We never see or store it in readable form.
• Payment details, which are entered directly with our payment provider. Card numbers never reach our servers. We receive only a transaction reference and its status.

When your bot runs on our servers

The bot trades on your account and reads your Telegram signals from our servers, so it has to hold what that takes. We use all of it only to run your bot and to show you what it is doing.

• Your MetaTrader 5 account number, trading password and broker server. The password is stored encrypted and is never shown back, to you or to us.
• Your Telegram API ID and API hash, your phone number, and the sign-in that lets the bot read Telegram as you. The hash and the sign-in are stored encrypted.
• Your trading settings: instruments, lot sizes, risk limits and the channels you chose to follow.
• The trading signals the bot reads from the channels and chats you chose, with what it did about each one. The bot does not store your other Telegram messages.
• Your account's balance, equity and open positions as MetaTrader reports them, and a log of the bot's activity, so the app can show them to you.
• The results of any backtest or strategy test you run. The PDF reports are emailed to you and are not kept by us.

When you join the affiliate programme

• Your name, email address and country.
• Your referral activity and commission balance.
• Payout details you supply, used solely to pay you.

Automatically, when you use the site

• Your IP address and browser type, seen by our hosting provider in ordinary server logs. These exist for security and reliability and are not used to build a profile of you.
• A session cookie once you sign in, so the site remembers you are signed in. See our Cookie Policy.

We do not run analytics. There is no Google Analytics, no advertising pixel, no session recording, and no cross-site tracking on this website.

3. Our legal basis for using it

Where the GDPR or a comparable law applies to you, we rely on the following bases.

• Contract. Creating your account, running your bot, providing support, and paying affiliate commission. Without this data we cannot provide the service.
• Legitimate interests. Answering enquiries you send us, keeping the site secure, preventing fraudulent signups, and keeping business records. We have considered your rights in each case and limited what we collect accordingly.
• Legal obligation. Keeping transaction and tax records for the period the law requires.
• Consent. Any optional marketing email, which you can withdraw at any time without affecting anything else.

4. Who we share it with

We do not sell personal data and we never will. We share it only with the providers below, each of which processes it on our instructions for the stated purpose.

• FormSubmit receives the contents of the contact and book-a-demo forms and forwards them to our support inbox. This includes any name, email, phone number and project detail you enter.
• Stripe processes card payments where card payment is offered. Stripe receives your payment details directly.
• MMG (Mobile Money Guyana) carries mobile-money payments. From MMG we receive the amount, the sender's number and the note you wrote.
• NOWPayments processes cryptocurrency payments where you choose that method.
• Supabase hosts our database and account authentication.
• Vercel hosts this website and processes ordinary server request logs.
• Kamatera provides the servers your bot runs on. Your bot's settings, credentials and activity are held there while it is set up.
• Cloudflare stores the app installer and, briefly, a test report on its way to your inbox.
• Your broker and Telegram receive the connections your bot makes as you, using the details you gave it. They are services you chose, not providers of ours.
• Zoho Mail carries our email correspondence with you.
• Google reCAPTCHA runs on the registration, affiliate signup and base registration forms to block automated abuse. When one of those forms loads, Google receives your IP address and interaction data. It does not run on the rest of the site.

We may also disclose data where the law requires it, or to establish or defend a legal claim.

5. Where your data goes

We operate from Guyana, and the providers above are located mainly in the United States and the European Union. If you are in the UK or the European Economic Area, this means your data is transferred outside it. Those transfers rely on the standard contractual clauses each provider offers, or on that provider being covered by an adequacy decision. You may ask us which mechanism applies to a particular provider.

6. How long we keep it

• Enquiry and demo requests: up to 24 months from your last contact with us, then deleted.
• Account and subscription records: for as long as your account is open, and then for 7 years, because tax and accounting rules require it.
• Affiliate records: for as long as the account is open, then 7 years for the same reason.
• Server logs: retained by our hosting provider on a short rolling window, typically 30 days.
• Bot settings and credentials: while your subscription is active and for up to 7 days after it ends, so that a prompt renewal carries on where you left off. After those 7 days your bot's settings, MetaTrader and Telegram details, Telegram sign-in, history and logs are permanently deleted. Ask us and we will delete them sooner.
• Bot activity: the activity log for about 14 days, signal history for about 90 days, and the summaries of tests you ran for about 30 days. Test reports are not kept once emailed.

When a retention period ends, we delete the data or irreversibly anonymise it.

7. Your rights

You can ask us to do any of the following, free of charge. We will respond within 30 days, and we may need to verify your identity first so that we do not disclose your data to someone else.

• Give you a copy of the personal data we hold about you.
• Correct anything inaccurate.
• Delete your data, where we are not required to keep it.
• Restrict or object to how we use it, including any use based on legitimate interests.
• Provide your data in a portable, machine-readable format.
• Withdraw consent you previously gave, at any time.

Email support@caeautomations.com to exercise any of these. If you are in the UK or EEA and believe we have handled your data badly, you may also complain to your national data protection authority. We would rather you told us first so we can put it right.

We do not make automated decisions that produce legal or similarly significant effects about you.

8. Keeping it safe

The site and the app communicate over HTTPS. Passwords are stored only as salted hashes. Trading and Telegram credentials are stored encrypted and are never displayed once saved. Administrative access is restricted, and payment details are handled by our payment providers rather than by us. There is more detail on our Security page.

No system is perfectly secure, and we will not pretend otherwise. If a breach affects your personal data and is likely to put you at risk, we will tell you and the relevant regulator without undue delay.

9. Children

This site and our services are intended for adults. We do not knowingly collect personal data from anyone under 18. If you believe a child has given us personal data, contact us and we will delete it.

10. Changes to this policy

If we change this policy we will update the date shown at the top of this page. Where a change materially affects your rights, we will tell account holders by email rather than relying on you to notice.