Privacy Policy

1. Introduction

Bushido Invest ("we", "us", "our") is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data when you access and use the Bushido Invest platform (the "Platform").

We process personal data in accordance with:

• The General Data Protection Regulation (EU) 2016/679 ("GDPR")
• Applicable Spanish data protection laws

By using the Platform, you acknowledge that you have read and understood this Privacy Policy.

2. Data Controller

The data controller responsible for your personal data is:

Bushido Invest
Andres Mendez
PO Box 20002, Rincón de la Victoria, Málaga, Spain
Email: info@bushidoinvest.com

3. Personal Data We Collect

We collect only the data necessary to operate and secure the Platform.

3.1 Account Data

When you create an account, we collect:

• Email address

Authentication is performed using passwordless "magic link" technology. We do not collect or store passwords.

3.2 Usage and Technical Data

When you access the Platform, we may collect:

• IP address
• Device type
• Browser type
• Access timestamps
• Basic log data

This information is used for:

• Security
• Fraud prevention
• Platform stability
• Technical debugging

3.3 User-Generated Content

If you upload or share:

• Backtest data
• Configuration parameters
• Structured trading results

This data is stored within your account. You are responsible for ensuring that uploaded content does not contain personal data of third parties or unlawful material.

4. Legal Basis for Processing

We process your personal data under the following legal bases:

4.1 Contractual Necessity

Processing is necessary to:

• Create and manage your account
• Authenticate access via magic link
• Provide access to the Platform's analytical features

4.2 Legitimate Interest

We process certain technical data to:

• Maintain platform security
• Prevent abuse
• Improve system performance

4.3 Consent

Where analytics cookies are used, processing is based on your explicit consent. You may withdraw your consent at any time via the cookie settings panel.

4.4 Legal Obligation

Where required to comply with applicable law.

5. How We Use Your Data

We use your personal data to:

• Provide secure authentication
• Operate and maintain the Platform
• Deliver structured performance analytics
• Improve usability and reliability
• Communicate essential service-related messages
• Detect and prevent fraud or misuse

We do not sell personal data. We do not engage in automated decision-making or profiling.

6. Cookies and Analytics

6.1 Essential Cookies

We use essential cookies required for:

• Authentication
• Session management
• Security
• Storing your cookie preferences (for example via browser local storage)

These cookies are necessary for the Platform to function and do not require consent.

6.2 Analytics and session insights (Google Analytics, Microsoft Clarity)

With your explicit consent, we use Google Analytics to understand how users interact with the Platform. Google Analytics may collect:

• IP address (anonymized where possible)
• Browser and device information
• Pages visited
• Interaction data

With the same consent, we may use Microsoft Clarity to generate heatmaps and session recordings that help us improve usability. Clarity is not activated until you provide consent via the cookie banner.

Google Analytics and Microsoft Clarity are not loaded until you accept analytics cookies. You may withdraw your consent at any time via Cookie preferences in the site footer, which may reload the page to apply your choice.

6.3 International Data Transfers

Although the Platform is hosted in Europe, Google Analytics and Microsoft Clarity may process data outside the European Economic Area (EEA). Where applicable, appropriate safeguards such as Standard Contractual Clauses (SCCs) are used.

7. Data Sharing

We do not share your personal data except as necessary to operate the Platform.

7.1 Service Providers

We may use trusted third-party providers for:

• Hosting infrastructure
• Email delivery services
• Security services
• Analytics services (with consent)

These providers process data under contractual agreements and only as necessary to provide their services.

7.2 Legal Requirements

We may disclose personal data if required by law or lawful authority.

8. Data Retention

We retain personal data only for as long as necessary to:

• Maintain your account
• Provide the Platform's services
• Comply with legal obligations
• Ensure security and prevent abuse

If you request deletion of your account, we will delete or anonymize your personal data unless retention is legally required.

9. Your Rights Under GDPR

You have the right to:

• Access your personal data
• Rectify inaccurate data
• Request deletion ("right to be forgotten")
• Restrict processing
• Object to processing
• Request data portability
• Withdraw consent (where processing is based on consent)

To exercise your rights, contact: legal@bushidoinvest.com

You also have the right to lodge a complaint with the Spanish Data Protection Authority (Agencia Española de Protección de Datos).

10. Security Measures

We implement appropriate technical and organizational measures to protect personal data, including:

• Encrypted HTTPS connections
• Secure authentication mechanisms
• Access controls
• Infrastructure security best practices

However, no system can guarantee absolute security.

11. Early Access Status

The Platform may operate under an Early Access model. Features and data structures may evolve over time. This does not affect your data protection rights.

12. Changes to This Privacy Policy

We may update this Privacy Policy periodically. When we do:

• The "Last updated" date will change.
• Continued use of the Platform constitutes acceptance of the updated version.

13. Contact

For any privacy-related inquiries:
Email: legal@bushidoinvest.com