Privacy notice

Onyx ([Onyx Ltd], [registered address]) is the controller of your personal data. This notice covers the website, the paper platform and, when live, the service. Questions: privacy@onyx-algo.com.

Account & identity: email, name, jurisdiction, and your investor-category self-certification. Verification: KYC and sanctions-screening data where required. Security: a hashed password, 2FA and recovery codes. Usage & technical: IP, device/browser, pages, timestamps and logs. Communications you send us. When live: trade-only exchange API keys — we never receive your funds or any withdrawal right. We collect no more than we need.

To provide and secure the service (contract); to verify eligibility and meet AML, sanctions and regulatory duties (legal obligation); to protect the platform, prevent fraud and improve the service (legitimate interests); and, for optional updates, with your consent.

Processors acting only on our instructions (hosting, email, authentication, analytics); the exchange you choose to connect; regulators, authorities and professional advisers where lawfully required; and a successor in any business transfer. We never sell your personal data.

We are UK-based. Where data is processed outside the UK, we rely on an adequacy decision or appropriate safeguards such as the UK International Data Transfer Agreement / standard contractual clauses.

For as long as you have an account and as needed for the purposes above; longer where the law requires (for example AML and financial records) or to establish or defend legal claims. We then delete or anonymise it.

We use encryption in transit, hashed passwords, two-factor authentication, least-privilege access, and trade-only keys with no withdrawal rights. No system is perfectly secure, so please protect your own credentials and device too.

You may ask to access, correct, delete, restrict or port your data, and to object to certain processing; you can withdraw consent at any time. We respond within the statutory period. You can complain to the ICO(ico.org.uk) — though we’d welcome the chance to put things right first.

We use essential cookies to run the site and, with your consent, analytics cookies to understand usage. You can manage these through our cookie banner and your browser settings.

We only contact you about your access or account, or with your consent. You can opt out of optional messages at any time.

The engine automates trading decisions about markets — not profiling decisions about you. We do not make solely-automated decisions that produce legal or similarly significant effects on you from your personal data.

Onyx is not intended for anyone under 18, and we do not knowingly collect their personal data.

We may update this notice as the service and our obligations evolve; the “last updated” date above always reflects the current version.

For any data question or request, contact privacy@onyx-algo.com. Our supervisory authority is the Information Commissioner’s Office (ICO), United Kingdom.