Privacy Policy

What we store

When you sign in with Deriv, we store your Deriv account identifiers (login ID, email, country, currency, account type as reported by Deriv), the API token Deriv issues for that sign-in, and a record of your sessions. The API token is encrypted at rest (AES-256-GCM) and is never sent to your browser — it is used only server-side to open your own authorized connection to Deriv's API on your behalf.

What we don't store

We do not ask for or store a Deriv password. We do not store payment card details — deposits and withdrawals happen entirely on Deriv's own systems.

Trading activity

Trades you place, including those placed by an auto-trading strategy you enable, are logged with the reasoning behind each one (see Trace on the Auto Trading page) so you can review what happened and why. This log is visible to you and to Tidevane's platform administrators for support and security purposes.

Who can see your data

Platform administrators can view account metadata and trading activity for support, security, and operational purposes. Administrators authenticate separately from user accounts and have no access to your Deriv password (which we never receive) or your account outside of what your API token grants this application.

Deleting your data

Signing out ends your session. To remove your stored account data entirely, contact support — this also revokes Tidevane's stored copy of your Deriv API token; it does not by itself revoke the token on Deriv's side, which you can do from your Deriv account settings.

This page is a plain-language summary, not legal advice, and has not been reviewed by a lawyer. It should be replaced with counsel-reviewed terms, including applicable data-protection law obligations for your jurisdictions, before this platform accepts real users.