SandBoxForum
Last Updated: January 1, 2026

Privacy Policy

SandBoxForum ("we", "us", or "our") is dedicated to upholding the highest standards of confidentiality, transparency, and personal data protection. This Privacy Policy outlines how we collect, process, store, disclose, and safeguard personal information obtained through sandboxforum.site and associated analytical software tools.

Our practices comply with the Personal Information Protection and Electronic Documents Act (PIPEDA), applicable provincial privacy legislation (including Quebec's Act Respecting the Protection of Personal Information in the Private Sector), and international privacy benchmarks.

1. Information We Collect

To deliver automated algorithmic workflows and maintain secure access, we collect personal information categorized as follows:

  • Identification & Contact Data: Name, email address, telephone contact number, country/province of residence, and communication records when you reach out for technical assistance.
  • Technical & Connectivity Metadata: IP address, device fingerprints, browser types, session timestamps, diagnostic event logs, operating system metrics, and network latency indicators.
  • Trading Configuration Data: Algorithmic preferences, selected asset pairs (e.g., BTC, ETH, FX pairs), risk parameters, simulation history, and read/write exchange API keys (which are strictly encrypted at rest).
  • Billing Information: Payment transaction references, plan subscription statuses, and invoice records handled via compliant third-party payment processors (we never store unencrypted payment card numbers).

2. Purposes and Legal Bases for Processing

We process your personal information under lawful, fair, and transparent grounds, specifically to:

  • Deliver, manage, and optimize our algorithmic trading indicators and web services;
  • Authenticate authorized user access, enforce security perimeters, and mitigate fraudulent or abusive activity;
  • Process subscription renewals and maintain accountable commercial accounting records;
  • Communicate service advisories, critical platform updates, and security announcements;
  • Comply with statutory reporting, fraud prevention, anti-money laundering (AML) protocols, and legitimate law enforcement requests under Canadian legal jurisdiction.

3. Consent and Data Subject Rights

By creating an account and interacting with SandBoxForum, you provide informed consent for the collection and handling of your data in accordance with this Policy. You retain clear legal rights regarding your personal information:

  • Access & Portability: You may request confirmation of whether we hold your information and receive an intelligible copy of your record.
  • Rectification: You are entitled to challenge the accuracy of your personal data and demand corrective amendments.
  • Consent Withdrawal & Erasure: You may withdraw consent for optional processing or request the deletion of your account and related data, subject to legal retention obligations.

To exercise any of these statutory rights, please submit a formal request to our designated Privacy Officer at [email protected].

4. Data Disclosure and Third-Party Processors

We do not sell, rent, or lease personal records to data brokers or advertisers. We share information only under strictly delineated circumstances:

  • Infrastructure Partners: Secure cloud infrastructure providers, edge hosting facilities, database management hosts, and cybersecurity monitoring vendors bound by rigid confidentiality agreements;
  • Financial Processors: Regulated payment gateways processing subscription charges in accordance with PCI-DSS standards;
  • Legal Compliance: Where required by valid court order, administrative subpoena, or regulatory directive issued by competent Canadian judicial or law enforcement authorities.

5. Cross-Border Data Transfers

Although our administrative headquarters reside in Montréal, Canada, our computational infrastructure may involve distributed cloud servers situated in Canada, the United States, or the European Economic Area. When personal information crosses jurisdictional boundaries, we ensure comparable technical and contractual protections are established.

6. Security and Retention

We implement multi-layered physical, administrative, and technological controls, including AES-256 encryption at rest, TLS 1.3 transport security, zero-trust network segregation, and routine vulnerability scanning. Personal data is retained only for the duration necessary to satisfy the commercial purposes outlined herein or as dictated by applicable financial record retention regulations (typically up to seven years for transaction histories).

7. Cookies and Analytics

We deploy essential and operational cookies to authenticate sessions, preserve interface preferences, and analyze platform telemetry. You may disable non-essential cookies via your browser preferences; however, disabling functional cookies may impair the responsiveness of automated execution dashboards.

8. Contact Our Privacy Officer

If you have questions, complaints, or feedback regarding our privacy governance, you may reach out directly to our Privacy Officer:

SandBoxForum Privacy Office
Bank Street 199, H3B 1A7 Montréal, QC, Canada
Email: [email protected] | Phone: +1 (416) 553-0354