ArrissaCapital privacy policy

01Purpose and scope

This policy applies to arrissacapital.com and the ArrissaCapital service. It explains what personal information we process, why we process it, how we protect it, and your rights.

Arrissa Capital licenses automated trading software that places orders in your own MT5 account at supported brokers. We are not a broker, not a portfolio manager, and not a financial adviser. We do not hold client funds.

02Contact and responsible party

Arrissa (Pty) Ltd, trading as ArrissaCapital, is the responsible party for your personal information under the Protection of Personal Information Act 4 of 2013 (POPIA).

Contact us at support@arrissacapital.com. Write to the same address to ask what we hold about you, to correct it, or to object to how we use it. If you are not satisfied with our answer you may complain to the Information Regulator of South Africa at enquiries@inforegulator.org.za.

03Personal information we collect

We collect and generate the following categories of information when you use the service.

• Identity and contact: name, email address, phone number, profile photo if uploaded.
• Trading connection: broker name, trading server, broker account number, and the broker account password held encrypted.
• Trading records: balances, equity, positions, trade history and profit or loss on connected accounts.
• Payments: payment records, amounts, currency, subscription status and Paystack references. Card details are handled by Paystack and never held by us.
• Affiliate: bank account name, number and branch details, payout requests, referral relationships and commission records.
• Technical: IP address, device and browser information, session cookies, and application logs.

04How we collect information

You provide most information directly when you register, connect a broker account, set risk, request payouts, or contact support.

We receive trading data from your connected broker account through the MetaTrader platform once you provide credentials and authorise access.

We receive payment confirmations and references from Paystack when you pay or when a renewal is processed.

We collect technical data through your device and browser, and from our application logs.

If you arrive via a referral link, we record that relationship.

05How we use information and lawful bases

We process your information only where we have a lawful basis under POPIA. The main bases are performance of our contract with you, our legitimate interests in running and securing the service, your consent for direct marketing, and legal obligation for records.

• To run automated trading on your account, including calculating position size from your balance and selected risk. Basis: contract.
• To verify that your broker account is under our introducing broker partnership before connection. Basis: contract and legitimate interests.
• To show you trade activity and the reason trades were taken or skipped. Basis: contract and legitimate interests.
• To process payments and manage subscriptions. Basis: contract and legal obligation.
• To operate the affiliate programme and pay commission. Basis: contract and legitimate interests.
• To provide support, prevent abuse, secure the service and keep logs. Basis: legitimate interests and legal obligation.
• To send service messages about connection, trades, expiry and renewal. Basis: contract and legitimate interests.
• To send marketing messages where you consent. Basis: consent.

06Trading connection and broker credentials

Your broker password is stored encrypted and is used only to place, modify and close orders on your connected account. Access is restricted and logged.

If you remove a connected trading account from ArrissaCapital, we delete the encrypted broker password for that account.

We cannot guarantee absolute security, but we take appropriate technical and organisational measures to protect credentials.

07Payments and Paystack

Payments and recurring subscriptions are processed by Paystack. We receive payment confirmations and references, amounts, currency and status from Paystack.

We do not see or store full card details. Payments settle in ZAR through Paystack.

08Cookies and tracking

We use essential session cookies so you can sign in, stay signed in and keep your session secure. Without these cookies, the service may not work.

You can block cookies in your browser, but essential parts of the site may not function.

09Sharing your information

We share information with trusted service providers that help us run the service. We require them to protect your information and use it only for the services they provide to us.

We do not sell your personal information.

• Your broker, via the MetaTrader platform, to place and manage trades on your connected account.
• Paystack for payment processing.
• Email delivery providers to send verification codes and service emails.
• Hosting and infrastructure providers that store and process our application and logs.
• Law enforcement, regulators or courts if required by law.

10International transfers

Our hosting, email or other providers may process information in countries outside South Africa. Where we transfer information, we take steps that POPIA allows to protect it, such as contracts with appropriate safeguards and limiting what is transferred.

11Retention

We keep account data for the life of your account and then for as long as needed for legal, tax and dispute purposes.

The encrypted broker password is deleted as soon as you remove the trading account from ArrissaCapital.

12Security

We use encryption in transit and at rest for credentials, access control, monitoring and regular backups. Access to production systems is limited to authorised personnel.

No method of transmission or storage is completely secure. We cannot promise absolute security.

13Your rights under POPIA

You have rights under POPIA, subject to limits in the law. You can exercise these rights by contacting us at support@arrissacapital.com.

We will respond within a reasonable time and may ask you to verify your identity.

• Access your personal information.
• Request correction of inaccurate information.
• Request deletion where we no longer need the information or where you withdraw consent for marketing.
• Object to processing based on our legitimate interests.
• Withdraw consent for marketing at any time.
• Lodge a complaint with the Information Regulator of South Africa.

14Marketing communications

We send service messages such as verification codes, trade notices, expiry and renewal emails.

We send marketing messages only if you consent. You can opt out at any time by using the unsubscribe link or by contacting us.

15Children and eligibility

Our service is for adults only. You must be 18 or over to register. We do not knowingly collect personal information from anyone under 18.

16Changes to this policy

We may update this policy from time to time. We will post the new version on the site and email you if the changes are material.

Your continued use after the effective date means you accept the updated policy.