Privacy Policy

Last updated: October 5, 2026

This policy explains what information Reactor collects and processes, why we use it, with whom it may be shared, and what choices the user has.

1. Who we are

The data controller is CODEOJO INC.

For privacy inquiries: contact form (topic: Privacy).

2. What information we collect

Depending on how Reactor is used, we may process the following types of information.

Contact details

Name, email address, phone number, country and details the user provided in contact, demo request, Freemium or other sign-up forms.

Reactor account

Name, email address, account and authentication details, preferences, settings, plan, permissions, Agents and service configuration.

Connected trading accounts

Depending on the permissions the user grants and the capabilities of the connected provider, Reactor may receive or process:

account identifiers;
balances;
buying power and margin;
positions;
orders;
trades;
trading history;
asset data;
and other financial data needed for the feature the user requested.

Information about financial activity may be considered personal data of special sensitivity under applicable law.

Connection and API details

When the user connects a service through an API or another authorization method, we may process the keys, tokens or technical credentials needed to maintain the connection.

Sensitive connection credentials are stored with appropriate safeguards in line with the service's architecture.

Use of Chat, Agents and AI

We may process:

prompts;
Chat messages;
Agent settings;
outputs;
actions carried out;
information the Agent gathered from authorized tools;
analysis results;
and run history.

When needed to carry out a request, some of the relevant information may be sent to AI model providers that work on behalf of the service.

Payments

Payments are processed through Stripe or another payment provider shown to the user.

When card details are entered directly with the payment provider, we do not store the full credit card number.

We may receive from the payment provider information such as transaction status, amount, currency, last four digits, customer ID and information needed for billing and accounting.

Technical and security information

We may collect IP address, browser and device type, operating system, access times, system logs, error messages and technical information needed for operation, security, abuse prevention and troubleshooting.

3. Why we use the information

We process information in order to:

create and manage accounts;
provide the service and the features the user requested;
display accounts, data and positions;
run Chat, Agents and automations;
send actions to connected providers when the user has approved it;
bill and manage subscriptions;
provide support and customer service;
maintain security and prevent fraud;
monitor malfunctions and improve system reliability;
comply with legal obligations;
and for marketing, where there is consent or another lawful basis.

We will not use personal information for a purpose incompatible with the purpose for which it was collected, unless permitted by law.

4. Are you required to provide information?

There is no general legal obligation to provide us with personal information.

However, some information is needed to provide a particular service.

For example, an account cannot be created without an email address, and features that depend on a trading account's data cannot be provided without permission to connect that account.

The user does not have to connect a trading account to use parts of the service that do not require one, where those parts are available in their plan.

5. Service providers and third parties

We may transfer or allow access to information only to the extent needed by service providers working on our behalf, or to carry out the action the user requested.

These providers may include:

hosting and cloud infrastructure;
databases and backup;
authentication and security services;
AI model providers;
monitoring and error-tracking systems;
email and communication providers;
Stripe and payment providers;
brokers and exchanges the user chose to connect;
and other services integrated into Reactor at the user's choice.

When the user activates an integration with an external service, information needed to carry out that action may be sent to that service.

We do not sell personal information to third parties.

6. Use of AI providers

To run AI features, Reactor may send an AI model provider the content of the request together with relevant information needed for the analysis.

Depending on the action, this information may include market data, positions, trade details, Agent settings or other account data the user allowed Reactor to use.

We aim to send only the information needed to complete the task.

AI providers' use of the information is subject to the arrangements and settings that apply to the services Reactor uses.

7. International data transfers

Reactor uses technology providers that may process information in different countries.

Where the law requires a specific mechanism for transferring information abroad, we will act in accordance with the requirements that apply to the transfer.

8. Data retention

We keep information only for as long as needed for the purpose for which it was collected, to operate the service, for security, to resolve disputes, or to comply with legal requirements.

Retention periods may vary by type of information.

When an account is closed or an integration is disconnected, some information may be deleted or made inactive, while other information may be kept for a limited period in backups, security logs, billing records, or where there is a legal obligation to keep it.

Information from marketing inquiries or sign-up requests that did not become an active account is kept for 12 months, unless there is a legal reason to keep it for a different period.

9. Information security

We use technical and organizational measures designed to protect information against unauthorized access, use, alteration or disclosure.

These measures may include encrypted communication, access controls, separation of permissions, protection of secrets, and security monitoring.

However, no computer system can be guaranteed to be completely immune to malfunction, intrusion or a security incident.

10. Your rights

Subject to applicable law, the user may be entitled to access the personal information held about them and to request correction of information that is inaccurate, incomplete, unclear or out of date.

Where appropriate, you can also ask us to close an account or delete information that we are not required or permitted to keep.

The right to deletion is not absolute and may be limited where there is a legal obligation, a legitimate need to retain the information, an accounting or security record, or another reason permitted by law.

For requests: contact form (topic: Privacy).

If the law grants the user additional rights, this policy does not reduce them.

11. Marketing messages

You can ask at any time to stop receiving marketing messages, through the unsubscribe link in the message or by contacting us.

Unsubscribing from marketing does not stop operational messages needed to manage the account and the service.

12. Minors

Reactor is not intended for anyone under 18.

We do not knowingly collect information to open a trading account for minors.

If we learn that information was collected contrary to this policy, we will handle it in accordance with the law.

13. Cookies and local storage

The site and the service may use cookies or local storage needed for:

saving preferences;
language selection;
session management;
security;
preventing fraud and spam;
and remembering the user's cookie choice.

As long as the site uses only essential technologies of this kind, they may operate without a marketing or tracking consent mechanism, in accordance with applicable law.

If we add analytics, remarketing, advertising or other non-essential tracking technologies in the future, we will update this policy and enable the required consent mechanism before turning them on, where the law requires it.

Third-party services the user is taken to, such as an external payment page, may use cookies under their own policies.

14. Changes to this policy

We may update this policy when the service, providers, the way we process information, or the law changes.

The date of the last update is shown at the top of the page.

When a material change affects existing users, we will give notice by reasonable means, as required by law.

15. Privacy contact

CODEOJO INC.

For any inquiry: contact form (topic: Privacy). You can also reach us on WhatsApp. Messages sent through WhatsApp are also processed by WhatsApp (Meta), under its own terms and privacy policy.