PRIVACY POLICY – GDPR

JAVLOT
Last updated: December 29, 2025
Article 1
Introduction
Javlot places great importance on protecting personal data and respecting user privacy.

This Privacy Policy explains:
- what personal data is collected,
- why it is collected,
- the legal basis for processing,
- how it is protected,
- and the rights of users under the General Data Protection Regulation (GDPR – EU 2016/679).
Article 2
Data Controller
The data controller is:

Javlot

Single-member simplified joint-stock company (SASU)
Registered office: 50 avenue des Champs-Élysées, 75008 Paris, France

Contact: support@javlot.io
Article 3
Personal data collected
Javlot collects only data strictly necessary for providing its services.

Collected data may include:
- identification data (name, email address),
- contact information,
- technical usage data,
- billing-related information,
- onboarding and service configuration data.

Javlot never collects:
- banking information (handled by third-party payment providers),
- credentials allowing direct access to users’ financial accounts.

For technical and billing purposes only, Javlot may access limited account information in read-only mode, such as account balance or equity, through secure integrations with third-party platforms. This access does not allow Javlot to execute trades, modify positions, or access user funds.
Article 4
Purpose of data processing
Personal data is processed for the following purposes:
- account creation and management,
- service delivery and operation,
- technical support and communication,
- billing and payment management,
- service improvement and security,
- compliance with legal obligations.
Article 5
Legal basis for processing
Data processing is based on:
- performance of a contract (Terms of Use / Terms of Sale),
- legal obligations,
- Javlot’s legitimate interests (security, service improvement),
- user consent where required.
Article 6
Data recipients
Personal data may be shared only with:
- technical service providers (hosting, SaaS tools),
- secure payment providers,
- partners strictly necessary for service execution.

Javlot does not sell or rent personal data.
Article 7
Data retention
Personal data is retained only for the duration necessary to fulfill the purposes for which it was collected and in accordance with applicable laws.

Data is then deleted or anonymized.
Article 8
Data security
Javlot implements appropriate technical and organizational measures to ensure data security, including:

- restricted access,
- encryption where appropriate,
- secure infrastructure,
- regular audits and controls.
Article 9
User rights
Under the GDPR, users have the following rights:
- right of access,
- right to rectification,
- right to erasure,
- right to restriction of processing,
- right to object,
- right to data portability.

Requests can be sent to : support@javlot.io
Article 10
Cookies
Javlot.io may use cookies necessary for website operation, analytics, and user experience improvement.

Users may manage cookie preferences via browser settings or on-site tools.
Article 11
International data transfers
Javlot primarily works with service providers located within the European Union.
When transfers outside the EU are required, appropriate safeguards are applied in accordance with GDPR requirements.
Article 12
Policy updates
Javlot reserves the right to update this Privacy Policy at any time.
Users will be informed of any significant changes.
Article 13
Contact and complaints
For any questions regarding personal data protection, users may contact:  support@javlot.io
Users also have the right to lodge a complaint with their local data protection authority.