Privacy Policy

1. Information We Collect

We collect information you provide directly to us, including:

• Name and contact information (email, phone number)
• Date of birth
• Residential address and country of residence
• Payment information (card data is tokenized by Authorize.net — we never store full card numbers)
• Trading account data and activity (trades, balances, P&L, account status) from Volumetrica
• Identity verification documents (government ID, selfie, proof of address) collected for KYC compliance via iDenfy
• Bank account or wire details when you request a payout (processed by Mercury for U.S. recipients, Wise for international)
• Discord username and ID if you link Discord to your trader account
• Support messages you send via Discord, email, or the in-app support channel

2. Identity Verification (KYC)

To comply with financial regulations and prevent fraud, we collect additional information for identity verification before processing payouts. KYC is performed through our verification partner iDenfy, which collects:

• Full legal name and date of birth
• Government-issued photo ID (passport, driver's license, or national ID card)
• A live selfie matched against the ID photo
• Complete residential address (with proof of address documents where required)
• Phone number and country of residence

iDenfy stores the verification documents on their EU-based infrastructure under their own privacy policy. We retain only the verification result (pass/fail, decision metadata) and the minimum supporting fields required for our regulatory recordkeeping obligations. This information is used solely for identity verification, fraud prevention, and compliance.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Process transactions and send related information
• Verify your identity for payout processing
• Send technical notices, account credentials, and support messages
• Respond to your comments, support tickets, and questions
• Monitor and analyze trading activity for rules compliance and payout eligibility
• Detect and prevent fraud, abuse, and prohibited trading patterns
• Comply with legal, regulatory, and tax-reporting requirements

4. Information Sharing

We do not sell, trade, or rent your personal information to third parties. We share the minimum information necessary with the following service providers so they can perform their specific function: Authorize.net and InstaSettle (payment processing), Volumetrica (trading platform and account provisioning), iDenfy (KYC verification), Mercury and Wise (payouts), Resend (transactional email), and the Anthropic API (AI-assisted support replies and compliance evaluation — see Section 9). We may also disclose information when required by law, court order, or to protect our legal rights.

5. Data Security

We implement industry-standard security measures to protect your personal information. Card data never touches our servers — it is tokenized inside the browser by Authorize.net's Accept.js and we receive only an opaque nonce, keeping us within the lowest-scope PCI DSS tier (SAQ-A). KYC documents are stored by iDenfy under EU GDPR-compliant infrastructure. All data in transit is encrypted via TLS, and sensitive credentials (API keys, JWT secrets, payout-banking tokens) are held in encrypted environment storage and never committed to source control.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide services. KYC records, payout records, and trading-activity records are retained for the period required by anti-money-laundering and tax-reporting regulations (typically five to seven years) even after account closure. Trading credentials, transient session data, and AI-pipeline working data are deleted on a shorter cycle.

7. Your Rights

You have the right to access, update, or delete your personal information at any time through your account settings or by contacting us. You can also request that we delete the KYC documents iDenfy holds on your behalf, subject to the regulatory retention requirements described in Section 6. Note that certain information must be retained for legal compliance even after deletion of your account.

8. Third-Party Services

We use the following third-party services to operate the platform. Each has its own privacy policy governing data usage on their side:

• Authorize.net: Card payment processing (PCI DSS Level 1)
• InstaSettle: Crypto payment processing
• Volumetrica: Trading platform, account provisioning, and trade reporting
• iDenfy: KYC identity verification (EU GDPR-aligned)
• Mercury: U.S. business banking — used in read-only mode to reconcile incoming revenue and outbound payouts, and as the rail for trader payouts to U.S. bank accounts (with bank-side multi-party approval)
• Wise: International payouts and currency conversion
• Resend: Transactional email delivery (account credentials, payout confirmations, support replies)
• Anthropic: AI models used for compliance evaluation of payout requests, support-reply drafting, and automation. We redact personally-identifiable information (full names, emails, phone numbers, account numbers, addresses) before sending prompts to the Anthropic API — see Section 9.
• Discord: Community and support channel — only the messages you post in Redline Discord servers and your Discord user ID are accessible to us
• Vercel: Application hosting and Postgres database (U.S. region)
• Upstash: Redis caching for performance

9. AI & Automation

We use AI (Anthropic Claude) to operate parts of the platform — specifically:

• Payout compliance evaluation: When you request a payout, an AI evaluator reviews your trade history against our rules (eligibility checks, drawdown discipline, gambling-pattern detection). Decisions are fully automatic — approved requests trigger an automatic Mercury payment proposal; denied requests are automatically rejected and the reason is emailed to you. The only human gate is the second-signer 2FA approval Mercury requires on the approve side; there is no manual-review queue.
• Support replies: Our Discord support channel may use AI to draft a first reply. AI-only replies handle simple questions; anything involving account state, money, or a policy decision is reviewed or written by a human.
• Operational automation: Internal jobs (error monitoring, account-state reconciliation, gmail-poll FAQ handling) use AI to triage and propose actions.

Before any text is sent to the Anthropic API, we run a PII-redaction step that masks full names, email addresses, phone numbers, residential addresses, account UUIDs, and payment identifiers. Anthropic does not train on inputs sent through their API. We do not allow the AI to autonomously move money or change account state — every money-touching action requires either a deterministic rule or human approval.

10. Cookies, Local Storage & Third-Party Tracking

We use a first-party authentication cookie (HTTP-only, secure, SameSite) to keep you logged in. Local storage holds non-sensitive UI preferences only.

We also load third-party marketing and analytics tools that set cookies and similar identifiers on your device when you visit our pages, including:

• Meta (Facebook) Pixel — conversion measurement and ad targeting
• Google Ads / Google Tag Manager — conversion measurement and remarketing
• X (Twitter) Pixel — conversion measurement
• Trustpilot — review widget

These vendors may receive information about your visit, including page URL, device and browser characteristics, IP address, and (for purchase events) the dollar amount of the transaction. Each vendor processes that data under its own privacy policy. You can opt out of advertising cookies at any time using your browser's privacy controls, or vendor-specific opt-outs (Meta off-Facebook activity controls, Google Ads Settings, and similar). California, Colorado, Connecticut, Virginia, Utah, and other state privacy-law residents may also exercise opt-out rights under "Do Not Sell or Share My Personal Information" — email privacy@redlinefuturesfunding.com.

11. International Transfers

Our primary hosting is in the United States. KYC documents are processed by iDenfy in the EU. Cross-border payouts go through Wise, which routes through their regulated entities in the U.K., E.U., and other jurisdictions. By using the service you consent to your information being transferred to and processed in these jurisdictions under the safeguards described in this policy.

12. Children

Redline Futures Funding is not directed at children under 18 and we do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with personal information, please contact us so we can delete it.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected in the "Last Updated" date at the top of this page and, where required by law, communicated to active users by email.

14. Contact

For questions about this Privacy Policy or to exercise any of the rights described in Section 7: Redline Discord Support.