Privacy Policy

1. Introduction and scope

This Privacy Policy (the "Policy") explains how Tasawur ("Tasawur", "we", "us") collects, uses, shares and protects information about you when you visit tasawur.ai, sign in, or use any part of the Tasawur platform (the "Service"), and the choices and rights you have.

The Service is used from many places, and this Policy applies to everyone in the same way. Where the law that applies to you gives you a right beyond those described here, that right applies too.

Third-party services you use alongside the Service, such as Telegram or a partner broker, handle your information under their own policies. This Policy is read together with the Terms of Service and the Usage Policy.

2. Who is responsible

Tasawur decides how and why your personal data is processed for the Service (in some laws, the "controller"). Privacy questions reach us at support@tasawur.ai, with "Privacy" in the subject line.

3. The information we collect

We collect what the Service needs to work, to keep accounts safe and to meet the law:

Identity, from Telegram

When you sign in with Telegram, it sends us your Telegram identifier, first and last name, username, profile photo if any, and, with your consent in the Telegram app, your verified phone number and permission for our Telegram bot to message you. Both are required: every account belongs to one verified person, and the bot is how we reach you about your access, support and your account. We do not receive your Telegram contacts or your messages to other people. We use the phone number to recognise you when you sign in through another Telegram login, so that each person has one account, and its country code to choose the hours at which our bot may write to you first. Your Telegram name and photo can appear on the Rank board, as described below.

Contact details

An email address, if you give one: after your first sign in, in Settings, or on a support conversation, which needs one. If your account has none, the address you give on a support conversation becomes your account's address, and the switches under Settings then Notifications apply to it. For every email we send we keep the address, the kind of message, its subject and whether our email provider accepted it.

Access verification

To activate free access you name the partner broker, type your trading account number and upload a screenshot of your account page showing that number and the balance. An automated check reads the screenshot once and the image is then discarded: we keep a fingerprint of the file and its size, from which the image cannot be rebuilt, so that the same screenshot cannot serve another account. The AI provider that reads it may keep it for a short time under its own terms. We keep the broker, the account number you typed, what the check read (the account type, number, balance and currency, the broker the page looked like, how sure the check was, and a short note), the network address and device of the request, the outcome, the reason for any decline, and any later decision of our team to end your access, with its reason. Our team may also look the account up in the reporting the partner broker gives its partners, and record whether it is registered under our partner arrangement, whether it is funded and the amount deposited.

Linked trading account

If you link a trading account in Settings, you give us its server, account number and password. The password is encrypted before it is stored, is never shown again, and is deleted when you unlink the account, when your access ends, or when your broker refuses it. While the account is linked, a MetaTrader 5 terminal on our servers stays signed in to it and reads, about once a second, what the account shows: the account holder's name as the broker records it, the currency, leverage, balance, credit, equity and margin, open positions and pending orders, and the trade history, including deposits and withdrawals. We keep the latest reading and every deal it shows, and the time and version of the linking terms you accepted. We use the deals and the balance to check, automatically, that the analyses you start are executed on the linked account and that it keeps the minimum balance the Terms set.

What you write and upload

Your messages to the AI analyst and the images you attach, the markets you ask about, the plans produced for you and what the analyst read to produce them, a short note a model writes on each of your plans that lost, your saved conversations and their titles, and your messages, photos and ratings in support conversations.

Preferences

The settings you choose, such as the model and depth of analysis, the Search the news switch, which emails reach you, and on-device preferences such as the music volume.

Technical and security information

The network address you use and an approximate place derived from it (country, region, city and network operator), your device and browser type, the dates and times of your sessions, the sessions themselves (as random identifiers we can revoke), sign-in attempts and their results, and the counters of your hourly allowances.

Support and correspondence

When you write to us, by email or inside the Service, we keep the correspondence: on a support conversation, the name and email address you give, its subject and topic, your messages and photos, your rating, and the network address and device it was opened from.

Our Telegram bot

Our bot on Telegram, the one you sign in with, is where an AI assistant working for our team helps you activate and keep your access. It usually writes first when you join, when a request of yours is declined, to say why and how to fix it, and when your access ends for a reason you can put right. It may also tell you when your access is approved, remind you of a step still open, answer questions about the platform, and suggest a partner broker to readers who have no account with one. We keep that conversation: the messages both ways, photos you send there, and short notes on where your request stands (for example the broker you use, an account number you gave it, whether you turned down a partner broker it suggested, and the step still open). If you share your phone number with the bot so that it can find your account, we use it only for that.

Financial information, and what we do not ask for

The balance of your trading account, read from your screenshot, confirmed with the partner broker or read from a linked account, and your deposits and withdrawals, are information about your financial position, which some laws treat as sensitive. We use it only to decide on and keep your access and, for a linked account, to show it to you, to measure results and to run the features you turn on.

Apart from the password of a trading account you choose to link, we do not ask for passwords, payment card details, identity documents, or data such as health, religion, politics or biometrics, and you should not send them. The Service uses no advertising trackers, social plug-ins or advertising analytics, and does not track you across other sites.

4. Where the information comes from

• From you, when you sign in, verify, write in the chat, to support or to our bot, change a setting or use the Service.
• From Telegram, when you sign in and consent to share your phone number and to let our bot message you.
• Automatically, from your device and connection.
• From our partner brokers, through the reporting they give their partners: whether an account you named is registered under our partner arrangement, open and funded, and how much was deposited.
• From our providers: whether our email provider accepted an email, and the approximate place and network operator behind a network address.

5. How we use it

We use the information above to:

• provide the Service: sign you in, keep your conversations and plans, produce analyses, track plans, build your Dashboard and apply your preferences;
• verify and keep access: check your screenshot, review your request, confirm it with the partner broker where needed, and keep access open or close it under the Terms;
• run a linked trading account: keep it signed in, show it to you, measure its results, and run on it only the features you turn on;
• keep the Service safe: detect and prevent fraud, abuse, multiple accounts and unauthorised access, and enforce our terms;
• measure fair use against your hourly allowances;
• communicate with you: answer support, tell you of a reply or of the outcome of a request, and send the notices the Service needs;
• help you in our Telegram bot as described above: a first message about something from the last two hours may come at any hour, while reminders and older news come only between 10:00 and 21:30 on your clock, taken from your phone number's country code or the country you last signed in from, and they stop when you ask;
• show the Rank board: if you are among the fifteen readers on it, other signed-in readers see your Telegram name and photo, the number of trades you took, your win rate and your running trades;
• send you announcements by email while your Announcements switch is on: news about Tasawur and offers, including offers of our partner brokers;
• improve the Service, using aggregated or de-identified information where possible;
• meet the law, answer lawful requests, and protect the rights and safety of Tasawur, its users and others.

We do not sell personal data, and we do not give it to advertisers or data brokers.

6. The legal grounds we rely on

Where a law that applies to you asks for a legal ground for processing, we rely on:

• the contract: most processing is needed to provide the Service you asked for under the Terms;
• legitimate interests: security, fraud prevention, fair use, improving the Service, communicating about it, helping you in our Telegram bot, the Rank board, and announcements while your switch is on;
• consent, where we ask for it, such as when Telegram asks you to share your phone number or to let our bot message you; you can withdraw it at any time, without affecting what happened before;
• legal obligation, where a law requires us to keep or disclose information.

7. Automated analysis and AI providers

The analyst, the chat, the screenshot check, our Telegram assistant and a tool that helps our support team word replies use large language and vision models from third-party providers, reached through OpenRouter, an AI gateway, with providers such as OpenAI and Google. For an analysis or a chat answer, the provider receives your request, any image you attach, and the market data and chart images the analyst reads, without your name, phone number, email address or account numbers. An analysis may also use the short notes on your earlier losing plans in that market. With web search on, your chat question may also go to the search service OpenRouter uses.

Three uses carry more. The screenshot check sends the picture of your account page. Our Telegram assistant is given what it needs to help with your access: your name, when you joined, the country you last signed in from and when you were last active; whether your access is active or suspended, and when and why our team ended it; your requests with their dates, broker, the last four digits of the account number, what the check read and the reason for any decline; the result of any check our team made with the broker; the last messages of your support conversation; whether we hold an email address for you; and its own conversation with you and its notes. It is not given your phone number or email address. When our team asks for help wording a support reply, that conversation, the name on it and up to three of its photos are sent to a model.

Anything you write in the chat or to our bot is processed by an automated system, so keep personal data and credentials out of it.

Tracking a plan's outcome is automated: the platform compares market prices with the plan's levels. The screenshot check is automated too, and declines a request at once when the picture is plainly not eligible, such as a Demo account, an edited image, another account number, a balance under the minimum, another broker's page, or a screenshot or account already used by another account. A request that passes is reviewed by a person, and only a person approves access or ends it. You can ask for a person to look at a decline through Get help.

The messages in our Telegram bot are written by an AI assistant for our team, which introduces itself by a first name and says so if you ask whether it is a person. It cannot change anything in your account, and a person from our team can read and join the conversation.

8. Cookies and storage on your device

The Service uses a few strictly necessary technologies, and none for advertising or cross-site tracking:

• a session cookie (HttpOnly, Secure, SameSite=Lax) that keeps you signed in, holding a random identifier that we store only in hashed form and can revoke;
• local storage for the music volume and for an announcement you closed;
• session storage, cleared when you close the tab, for the analysis you were watching, a support link you opened, and a reload mark used after an update;
• your browser's ordinary cache.

You can clear these in your browser at any time; you will then be signed out. While you use the Service your browser also contacts Telegram, for the sign in button and profile photos, and Google, for the small site icons next to the web sources of a chat answer.

9. Who receives it

We share personal data only as follows:

• Providers acting for us: Supabase (database and stored files), Hostinger (the servers that run the application and the trading terminals), Vercel (the website), OpenRouter and the AI model providers it routes to, such as OpenAI and Google, Zoho (ZeptoMail sends our emails, and Zoho Mail holds the support@tasawur.ai inbox, which receives a copy of each support message), and ip-api.com (the approximate place behind a network address). Each receives what its function needs. Market data comes from TradingView and news from Investing.com and other publishers; we send them nothing about you.
• Telegram, which signs you in, provides your identity data at your request, and carries the messages between you and our bot.
• Partner brokers, only as needed to confirm whether an account you named is registered under our partner arrangement and funded. We do not give any broker your conversations, plans or record.
• Other readers, on the Rank board only, as described under How we use it. Your phone number, username, email address and account numbers never appear there.
• Professional advisers under confidentiality, where needed.
• Authorities and others where the law requires it, or where it is needed to establish or defend legal claims or to protect the rights and safety of Tasawur, its users or others.
• A successor in a merger, acquisition or sale of assets, with this Policy continuing to apply unless you are told otherwise.

10. International processing

The Service works worldwide and its providers operate in several places, so your information may be processed outside the place where you live. It stays covered by this Policy wherever it is processed, and where a law requires a safeguard for such a transfer, we rely on one that law recognises.

11. How long we keep it

• Account and identity information: while your account exists, and afterwards for as long as needed to settle disputes, prevent a closed account from being re-created and meet the law.
• Conversations, plans and records: while your account exists. Ask us through Get help to delete a conversation or a plan. Outcomes may be kept in aggregate, de-identified form to measure the analyst.
• Access requests: the account number, the broker, what the check read, the fingerprint of the screenshot (never the screenshot itself), the outcome and the reason, for as long as needed to decide and keep your access and to detect the re-use of a screenshot or an account.
• Support conversations, your conversation with our Telegram bot, and their photos: while your account exists, and afterwards for as long as a later request may need them.
• A linked trading account: the password until the account is unlinked or the broker refuses it, the latest reading until it is unlinked, and its deals while your Tasawur account exists.
• Sign-in attempts: one hundred and eighty days, and refused attempts with no account, fourteen days. Session records and the record of emails we sent you: while your account exists; the email records may be kept afterwards to prevent abuse and settle disputes.

Information no longer needed is deleted or de-identified. It may be kept longer where the law requires it or where it is needed for a legal claim.

12. How we protect it

We use technical and organisational measures suited to the information: encrypted connections between your device and the Service, session identifiers stored only in hashed form, cookies that scripts cannot read, encrypted storage of linked trading account passwords, access controls, uploaded files kept in non-public storage, rate limits and monitoring of sign-in activity. If an incident affects your data, we act as the law that applies requires. You help by keeping your Telegram account and devices secure.

13. Your rights

Depending on the law that applies to you, you may ask us to:

• tell you whether we process your personal data, and give you a copy;
• correct inaccurate data (your name, username and photo come from Telegram, and update at your next sign in after you change them there);
• delete your data: our team carries out the request, apart from records kept to prevent abuse, meet the law and settle disputes, such as the record of emails we sent;
• restrict or stop certain processing, including processing based on legitimate interests;
• give you the data you provided in a common machine-readable format;
• withdraw a consent you gave;
• have a person review a decision of the automated screenshot check.

To make a request, write to support@tasawur.ai or use Get help. We may need to confirm that you are the account holder. We aim to answer within thirty days, and a reasonable request costs nothing. You may also contact the data protection authority where you live.

14. Your choices

• Add, change or remove your email address under Settings then Notifications.
• Choose which emails reach you under Settings then Notifications: support replies, access reviews and announcements (news and offers from Tasawur and our partner brokers). Each is on until you turn it off, and one master switch turns every email off. Notices the Service needs still reach you inside the Service and in our Telegram bot.
• Ask us through Get help to delete a conversation, a plan or your account, or to be left off the Rank board.
• End a session by signing out; your other devices stay signed in.
• Stop our bot's messages by replying STOP (or توقف) in the bot, or by asking support: our assistant then writes to you there only if you write first, and a person from our team may still write to you about your access. Signing in needs the bot's permission, so a blocked bot is asked for again at your next sign in.

15. Children

The Service is for adults. We do not knowingly collect data from anyone under eighteen, or under the age at which a person may trade leveraged products where they live if that is higher. If you believe such a person has an account, tell us and we close it.

16. Third-party services and links

The Service links to partner brokers, uses Telegram for sign in, and reaches you through our Telegram bot. Their own terms and privacy policies apply to what they do with your information.

17. Changes to this Policy

We may update this Policy as the Service, the law or our practices change. The version in force is the one published at tasawur.ai/PrivacyPolicy and inside the Service, with its date and version at the top, and for a significant change we tell you inside the Service or by email. Using the Service after a change takes effect means accepting it.

18. Contact

Privacy questions and requests: support@tasawur.ai, with "Privacy" in the subject line, or Get help inside the Service.