Privacy Policy

Last updated: July 13, 2026

This Privacy Policy explains how MirrorFlow ("MirrorFlow", "we", "us"), domiciled in the Republic of Colombia and acting as data controller, collects and processes personal data through the site mirrorflow.app and in providing the MirrorFlow software. For any privacy inquiry: support@mirrorflow.app.

1. Local processing: zero trading data

The privacy of your trading infrastructure is a priority. The Software executes all algorithmic routing locally on the User's machine. Your strategies, lot sizing, destination broker credentials (NinjaTrader 8, MetaTrader 4, MetaTrader 5, cTrader, ProjectX and Interactive Brokers) and funding-firm API keys are never transmitted to our servers nor stored by us. We have no visibility whatsoever into your operations.

2. Personal data we collect

• Identification and contact: name and email address (linked to your license).
• Messaging data: number and content of your communications via WhatsApp or email.
• Purchase data: transaction confirmation and identifier provided by the payment processor (we do not receive or store card data or banking credentials).
• Technical data: when visiting the site, the hosting provider may temporarily log the IP address and browser data for security and operational purposes.

3. Purposes and legal bases

• Process the purchase, issue and activate the license (performance of a contract).
• Provide support and send essential technical notices about the product (performance of the contract and legitimate interest).
• Comply with legal, tax and accounting obligations (legal obligation).
• Non-essential communications, where applicable, subject to revocable consent.

4. Processors and third parties

We share data, on a limited basis, with providers that act on our behalf or independently:

• PayPal — payment processing, subject to its own privacy policy.
• WhatsApp / Meta — support and messaging channel.
• Web hosting provider (Vercel) — site delivery and technical logs.
• Google Fonts — when loading the typefaces, the browser makes a request to Google servers that may log the IP address.
• Email provider — delivery of licenses and communications.

5. Cookies and analytics

The site is static and does not use advertising cookies or third-party tracking cookies. The internal search works locally in your browser. If analytics tools are incorporated in the future, this policy will be updated and, where applicable, your consent will be requested.

6. International transfers

Some of our providers (for example, PayPal, Meta, Vercel or Google) may process data outside your country of residence, including the United States. In such cases, the safeguards provided for by applicable data protection regulations apply.

7. Retention

We retain administrative and license data for as long as the license is in force and during the legal retention periods (for example, tax and accounting obligations). Once those periods have elapsed, the data is deleted or anonymized.

8. Security

We apply reasonable technical and organizational measures to protect your data. Nevertheless, no system is completely secure and we cannot guarantee absolute security.

9. Your rights

In accordance with Colombia's Law 1581 of 2012 (Habeas Data / Personal Data Protection Regime) and its implementing regulations, you have the right to access, update, rectify and delete your data, as well as to revoke the authorization granted. Depending on your jurisdiction, you may also be entitled to equivalent rights under the GDPR (European Union) —access, rectification, erasure, objection, restriction and portability— or the CCPA/CPRA (California) —to know, delete and non-discrimination—; we do not sell personal data. To exercise your rights, write to us at support@mirrorflow.app stating your license ID. You may also file a complaint with the Superintendencia de Industria y Comercio (SIC) (Colombia's data protection authority) or with the competent data protection supervisory authority in your country.

10. Minors

The site and the Software are directed at persons over 18 years of age. We do not knowingly collect data from minors.

11. Changes to this policy

We may update this policy; the version in force will be published on this page with its update date. We recommend that you review it periodically.

12. Contact

Data controller: MirrorFlow (Republic of Colombia). Email: support@mirrorflow.app.