Privacy Policy
Effective Date: July 31, 2026
1. Information We Collect
XAUMarket AI collects essential user data necessary for service authentication, security auditing, and license verification:
- Account Data: Username, registered email address, and cryptographically hashed passwords (salted bcrypt).
- Verification Data: Transient One-Time Passwords (OTPs) generated for registration and credential recovery.
- Security & Access Logs: IP address, timestamp, and authentication status for fraud prevention and audit logging.
2. Data Usage & Confidentiality
We strictly utilize your data to operate the terminal, verify license limits, and maintain system security:
- Passwords are stored using industry-standard bcrypt hashing and are never stored or transmitted in plain text.
- Email addresses are utilized solely for account verification, security notifications, and password resets. We do not sell or trade user information to third parties.
3. Session Storage & Cookie Policy
XAUMarket AI utilizes HTTP-only cookies and browser Local Storage to maintain secure JWT session states. Tokens contain encrypted user identifiers and expire automatically after 7 days.
4. Contact & Data Deletion
Users may request complete account data removal or administrative key updates by contacting system support through official administration channels.