Privacy policy

This website is run by Prop Firm Studios, a partnership registered in Pakistan, at Mall of Faisalabad, Office No. 27, 2nd Floor, Canal Road, Faisalabad 38000, Pakistan.

We decide why and how the personal data described on this page is used. In the terms of European and UK data protection law, we are the controller of that data.

For any question or request about your personal data, email [email protected]. We answer privacy requests within 30 days.

We serve both businesses and individual consumers. This policy covers everyone who visits the site, sends us a request, joins our newsletter or waitlist, or takes part in our referral program.

The site and the newsletter are for people aged 16 or over. We do not knowingly collect personal data from anyone under 16. If you believe a child under 16 has sent us personal data, email [email protected] and we will remove it.

Buying our services requires you to be 18 or over, or to be acting for a business.

Audit requests: when you request an audit, we collect what you enter in the form: your name, email address and country; your phone number and firm or project name, if you give them; your firm's stage, type and trading platform; the goals you choose, your monthly budget band and your message; whether you were referred and any referral code; your confirmation that you are 18 or over or requesting for a business, with the time you gave it; and that the form showed you the notice about this policy when you sent it.

Where a request came from: with each audit request we record the UTM tags in the link you followed, the site that sent you and the first page of your visit, if you have allowed analytics cookies. Without that permission, we record only the page you sent the form from and any UTM tags or referring site of that page.

Calculator summaries: if you use the launch cost calculator and then request an audit, a summary of your calculator choices is attached to your request so we can prepare. If you do not send a request, what you enter in the calculator stays in your browser and is not sent to us.

Free trader tools: they run in your browser. Nothing you enter is sent to us. Each tool remembers your last inputs on your device only (listed on our cookie policy) until you select Reset. A share link you copy holds only the numbers and choices you entered, in the address of the page.

Newsletter and waitlist: when you sign up, we collect your email address, the product for a waitlist, your confirmation that you are 16 or over, that the form showed you the notice about this policy, the page you signed up on, and the dates and times you signed up, confirmed and unsubscribed.

Referral records: when you join our referral program, we collect your name, your email address, your company if you give it, your confirmation that you are 18 or over or joining for a business, and that the form showed you the notice about this policy. We create your referral code and link, and record the audit requests sent with your code and the date the referred client's first invoice was paid.

Call bookings: when you book a call, the booking service collects your name, email address and the details of your booking and shares them with us.

Emails you send us: if you email us, we receive your email address, your name if you include it and whatever you write.

Clients: if you become a client, we keep the billing details you give us (billing name, company, email address, country and billing address) and the proposals, agreements, invoices and credit notes we send you, with the dates you viewed them online.

Signing an agreement online: when you sign an agreement through our signing page, we record the name you type, your email address, the date and time, your IP address, your browser's description (user agent) and a fingerprint of the document. They are printed on the signed copy as the record of your signature.

Technical data: every visit passes through our security and hosting services, which process your IP address, browser type and request data. We use this only to keep the site working and secure and to stop spam and abuse. We do not use an analytics service on the site.

If you are in the European Union, the European Economic Area or the United Kingdom, the law requires us to name a legal basis for each use of your data. These are the bases we rely on.

Consent: we send the newsletter only after you confirm your subscription. Advertising tags run only if we have switched them on, and then only after you accept them in our cookie settings, wherever you are, the United States included. A Global Privacy Control signal from your browser keeps them off. You can withdraw your consent at any time, and doing so does not affect what happened before you withdrew it.

Steps before entering an agreement: when you request an audit or book a call, we use your details to answer you and to prepare a possible engagement at your request.

Legitimate interests: we use technical data to keep the site secure, to prevent fraud and spam, and to improve the site. We have weighed these interests against your rights and keep the data we use for them to a minimum.

Legal obligation: we keep referral records because tax law requires us to keep records of payments.

We use a small number of service providers to run the site. Each one processes personal data only to provide its service to us, under a data processing agreement.

Cloudflare: security, fast delivery of the site, and spam protection on our forms with Turnstile. It receives your IP address, browser and request data. When you send a form, we also pass your IP address to Turnstile to check the request.

Cloudflare R2: private storage for files uploaded to our admin, signed agreements and the daily backups of our database. Our storage is set to Western Europe.

Render: hosting for the site and its database. It stores the data we collect, as listed on this page.

Resend: sends our emails, such as newsletter confirmations and replies to requests. It receives your email address and the content of the message, and tells us whether each email was delivered or bounced. If you confirm the newsletter, your address is also kept in our Resend contact list so we can send it. Resend is a United States company: we send through its European (Ireland) region, and its data processing agreement says its main processing takes place in the United States.

Cal.com: call booking. The booking calendar loads only when you choose to open it. It receives your name, email address and booking details.

TradingView: the economic calendar on our tools pages. It loads only when you select Show calendar. It then receives your IP address and the address of the page, and sets its own analytics cookies, listed on our cookie policy.

Sentry: error monitoring, so we can find and fix faults on the site. It receives technical data about errors and is configured not to send IP addresses or personal data. We use its European Union (Germany) region.

UptimeRobot: checks that the site is online. It receives no visitor data.

Google Workspace: our email inbox. It receives the messages you send us.

Advertising services from Meta, Google Ads and LinkedIn: these load only if we have switched them on, and then only after you accept Advertising in our cookie settings. They receive data about your visit, such as the pages you view and whether you arrived from one of their ads.

The site and its database are hosted in the European Union, in Frankfurt, Germany, on Render, behind Cloudflare.

Our team works in Pakistan and accesses the data from there, through our secure admin.

Some of our service providers are based outside the European Union, including in the United States. When your data goes to them, the transfer is protected by the European Commission's Standard Contractual Clauses or another recognized safeguard, such as the EU to US Data Privacy Framework where the provider is certified under it. You can ask us for more information about these safeguards by email.

We do not use any messaging app to take or discuss requests. Every request goes through the forms on this site, call booking or email, and you can always reach us at [email protected].

The newsletter is sent weekly. We use double opt-in: after you sign up, we send an email asking you to confirm, and you only receive the newsletter once you do.

Every newsletter has a one-click unsubscribe link. When you unsubscribe, we stop emailing that address straight away. Replies to your requests and other service emails, such as confirmations and invoices, have no unsubscribe link because they are not marketing. To stop any email from us, email [email protected].

Newsletter and campaign emails: for each one we send you, we record whether it reached you or bounced, whether and when you opened it, how many times you clicked a link in it, and whether you unsubscribed from it. Opens are counted with a tiny image in the email, which your mail app loads when you open it; if your mail app blocks images, no open is recorded, and some mail apps load images for you, so the count is not exact. Links pass through our own website to count the click, then take you straight to the page. The links also carry tags that tell our analytics the visit came from that newsletter (utm tags). An edition sent without open counting says so in its footer.

Audit request replies, sign-up confirmations, referral emails and our other service emails: we record only whether each one reached you. We do not count opens or clicks in these emails.

Invoices, credit notes, proposals and agreements: these emails contain no tracking image. Each one has a private "View online" link; when you open it, we record the date and time you viewed the document, so we know it reached you. The link works for 180 days and shows only that document.

We use these records to see which emails are useful and to know when a document has been read. We do not sell them or use them to build profiles for advertising.

Audit requests, including any calculator summary attached to them: 24 months after our last contact with you, then deleted.

Newsletter and waitlist emails: until you unsubscribe. After that, we keep your email address on a do-not-email list, only so we can make sure you are not emailed again.

Newsletter and waitlist sign-ups that are never confirmed: 30 days.

Delivery, open, click and unsubscribe records for each newsletter or campaign, and delivery records for other emails: 24 months after the email was sent, then deleted.

Records of when you viewed a document online: as long as the document itself, because they form part of the record of that document.

Referral records: 6 years, because tax law requires us to keep them.

Signed agreements, with their signing record: 6 years after the engagement ends.

Invoices, credit notes and the billing details on them: 6 years after the end of the tax year they belong to.

Proposals we sent you: 6 years if they led to an agreement; otherwise 24 months after we sent them.

Our admin's change log, which can show your name or email address next to a change we made to your records: 6 years for entries about invoices, credit notes, agreements and payments; 24 months for all other entries.

Your privacy requests and how we handled them: 3 years, as proof that we handled them.

The do-not-email list: as long as we need it to make sure you are not emailed again.

An audit request or referral record that is part of your client records: as long as those records.

Backups: we make a daily backup of our database, stored privately in Cloudflare R2. We keep the daily backups of the last 30 days and the first backup of each month for 6 months, then delete them. When we delete a record from the database, it stays only in the backups made before that date, until those backups are deleted.

Technical data held by our security, hosting and monitoring services is kept for the shorter periods those services set for their own logs.

If you ask us to delete your data sooner, we will, unless the law requires us to keep it.

We do not sell personal data for money.

If you accept advertising cookies, the advertising pixels from Meta, Google Ads and LinkedIn may count as "sharing" of personal data for cross-context behavioral advertising under some US state laws. That is why they load only after you accept them, and you can change your mind at any time.

To opt out, use the "Do not sell or share my personal information" link in the footer of every page, or turn off Advertising in Cookie settings.

We honor Global Privacy Control signals. If your browser sends one, we treat it as a request to opt out, and advertising pixels do not load.

If you are in the European Union, the European Economic Area or the United Kingdom, you have the right to access the personal data we hold about you, to have it corrected, to have it deleted, to restrict how we use it, to object to how we use it, and to receive it in a portable format.

Where we rely on your consent, you can withdraw it at any time.

You also have the right to complain to the data protection authority in the country where you live or work. We would appreciate the chance to deal with your concern first, so please consider contacting us before you do.

If you live in California or another US state with a privacy law, you have the right to know what personal data we collect and how we use it, to have it deleted, to have it corrected, and to opt out of the sale or sharing of your personal data for cross-context behavioral advertising.

We will not treat you differently for using any of these rights.

You may use an authorized agent to make a request for you. We may ask the agent for proof that you gave them permission.

The rights described on this page apply to everyone, wherever you live, including residents of the United Arab Emirates and Saudi Arabia. You can ask to access, correct or delete your personal data, object to or restrict how we use it, receive a copy of it, or withdraw your consent, by emailing [email protected].

Your data is processed outside the United Arab Emirates and Saudi Arabia: it is stored in the European Union (Frankfurt, Germany), some of our service providers process it in the United States, and our team accesses it from Pakistan. We transfer it only to run the site and to provide our services, with the protections described in "Where your data is stored" and "Services that process your data".

To use any of the rights on this page, email [email protected] and tell us what you would like us to do.

We may ask you for information to confirm your identity before we act on a request, so that we never give your data to someone else.

We respond within 30 days. Using your rights is free.

The site uses encrypted connections. Access to requests and records is limited to our in-house team, behind secure login.

No system is completely secure, but we work to keep your data safe and to act quickly if something goes wrong. If a breach puts your rights at risk, we will tell you and the relevant authorities as the law requires.

Our cookie policy lists every cookie and browser storage item the site uses, what each one does and how long it lasts. You can change your choices at any time with the Cookie settings link in the footer.

We update this policy when the way we handle personal data changes. The last updated date on this page shows when it last changed. If a change affects how we use data you have already given us, we will tell you before it applies.