Privacy Policy

1. Who We Are

AutoNom Trading is a Sharia-compliant copy trading service based in Mombasa, Kenya. We connect your Islamic swap-free broker account to our EA/AI master account. When we trade, your account copies automatically.

We are a data controller under the Kenya Data Protection Act (DPA) 2019. This means we decide how and why your personal data is processed.

2. Information We Collect

To provide our copy trading services, we collect the following information:

Islamic Compliance Note: We also collect confirmation of your swap‑free account status to ensure all trades comply with Sharia principles.

Important: We do not collect bank account details, payment information, government IDs, proof of address, or source of funds documents. All payments are made directly to our bank account via a virtual account provided after registration – we do not store or process your payment details on our servers.

3. How We Use Your Information

We process your personal data only for legitimate business purposes:

• To provide our service — Execute trades, manage your account, and enable copy trading
• To process payments — We do not process payments ourselves; you pay our bank directly using the virtual account details we provide. We only verify receipt of your payment to activate your subscription.
• To improve our EA/AI — Analyze trading patterns to optimize performance
• To communicate with you — Send account updates, performance reports, and support responses
• To secure our platform — Prevent unauthorized access and detect fraud
• To comply with Kenyan law — Tax reporting and regulatory obligations

4. Who We Share Your Data With

We never sell your personal information. We share data only when necessary to provide our service or comply with the law:

• Your Broker — AvaTrade Kenya, IC Markets, or your chosen Islamic broker (for trade execution). All trading is done via read‑only API — we cannot withdraw your funds.
• Cloud Infrastructure — Secure hosting providers (data protection agreements in place)
• Kenyan Authorities — If required by law (court order, tax audit, anti‑money laundering investigation)

We do not share your data with payment processors (since you pay our bank directly) or with any Sharia Supervisory Board (we do not have one).

All third parties are under strict confidentiality agreements and only process data for the specific purposes outlined above.

5. How We Protect Your Data

We take security seriously. Your funds stay in YOUR control through read-only API access — we can copy trades but cannot withdraw money. Your data is protected by:

• Encryption in transit — TLS 1.3 with 256-bit SSL for all data transmission
• Encryption at rest — AES-256 for stored trading credentials
• Read-only API access — We can execute trades but cannot withdraw funds
• Access controls — Only authorized personnel can access your data
• Regular updates — Security patches and vulnerability monitoring

Important: Your money never leaves your broker account. AutoNom only has trade-copying access — no withdrawal capability.

6. How Long We Keep Your Data

We keep your data only as long as necessary:

After retention periods expire, data is securely deleted from our systems.

7. Your Legal Rights (Kenya DPA 2019)

Under Kenyan law, you have the following rights regarding your personal data:

• Right to Access — Request a copy of all data we hold about you
• Right to Rectification — Correct inaccurate or incomplete information
• Right to Erasure (Right to be Forgotten) — Request deletion of your data (subject to legal retention requirements)
• Right to Restrict Processing — Limit how we use your data in certain circumstances
• Right to Data Portability — Receive your data in a machine-readable format
• Right to Object — Object to processing based on legitimate interests, including marketing
• Right to Withdraw Consent — Withdraw any consent you've given at any time

If you are unsatisfied with our response, you have the right to lodge a complaint with the Office of the Data Protection Commissioner (ODPC) at www.odpc.go.ke.

8. Cookies & Tracking

We use essential cookies only to keep you logged in and secure your session. We do not use tracking cookies or sell your browsing data.

You can disable cookies in your browser settings, but this may affect functionality (you may need to log in more frequently).

9. Children's Privacy

Our services are for adults aged 18 years and above. We do not knowingly collect data from anyone under 18. If we become aware of such data, we will delete it immediately.

10. Changes to This Privacy Policy

We may update this policy occasionally to reflect changes in the law or our practices.

• Minor changes: Updated on this page with a new "Last updated" date
• Material changes: We will notify you by email at least 14 days before the changes take effect

Continued use of our services after changes constitutes acceptance of the updated policy. If you disagree with changes, you may close your account and request data deletion.

11. Contact Us

For religious or Sharia‑related questions, please consult your local Islamic scholar.