Privacy Policy

Effective date: 2026-01-01  ·  Last updated: 2026-05-05

1. Introduction

Novalgo, a brand of Pelilo AB (org. nr 556737-7030) ("we", "us", "our"), is committed to protecting your personal data. This policy explains what data we collect, why we collect it, how long we keep it, and your rights under the EU General Data Protection Regulation (GDPR).

2. Data We Collect

• Account information: name, email address, password (stored as a one-way hash), language preference, and registration date.
• Trade logs: position IDs, trading symbols, direction (buy/sell), entry and exit times and prices, lot sizes, profit/loss figures, and account type (live/demo). This data is generated by your trading bot and transmitted to our platform.
• Billing information: subscription plan, charge history, and invoice records.
• Technical logs: API request logs retained in AWS CloudWatch for up to 90 days for security and debugging purposes.

3. Legal Basis for Processing

We process your personal data on the basis of performance of a contract (GDPR Art. 6(1)(b)). The processing is necessary to provide you with the service you have signed up for. Trade logs are required to display your performance history and to calculate billing charges where applicable.

4. Retention Periods

• Trade logs: retained for 365 days from the date of each trade entry, after which they are automatically and permanently deleted.
• Account data (name, email, subscription and invoice history): retained for the lifetime of your account and for up to 7 years after closure for tax and legal compliance purposes.
• Technical logs (CloudWatch): 90 days.

5. Your Rights

Under GDPR you have the following rights:

• Right of access (Art. 15): request a copy of all personal data we hold about you.
• Right to erasure (Art. 17): delete your complete trade history at any time from the platform dashboard (Trade History → Delete Trade History), or contact us to request full account deletion.
• Right to data portability (Art. 20): export your complete trade history as a CSV file directly from the dashboard (Trade History → Export CSV).
• Right to rectification (Art. 16): request correction of inaccurate account data by contacting us.
• Right to object (Art. 21): object to processing where we rely on legitimate interests.

To exercise any of these rights, contact us at info@novalgo.se. We will respond within 30 days.

6. Data Location & Security

All data is stored within the European Union (AWS eu-north-1, Stockholm, Sweden). We use HTTPS/TLS for all data in transit and AWS server-side encryption (AES-256) for data at rest. Access to production systems is restricted to authorised personnel only.

7. Third Parties

We do not sell your data. We use the following sub-processors and service providers: Amazon Web Services (cloud infrastructure, EU region), Stripe (payment processing, covered by their own GDPR-compliant data handling), and Google Analytics for aggregated measurement of traffic on the public Novalgo website. We do not use advertising trackers on the platform.

8. Cookies and Website Analytics

The public Novalgo website uses Google Analytics only after you have accepted analytics in the cookie banner. Google Analytics may set cookies or use similar browser storage to help us understand aggregated website traffic. If you decline, analytics is not loaded. We store your consent choice in your browser so the banner does not need to be shown on every page.

9. Contact & Supervisory Authority

Data controller: Pelilo AB (org. nr 556737-7030), trading as Novalgo  ·  info@novalgo.se

If you believe we have not handled your data correctly, you have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY): www.imy.se.