This policy explains what personal data Tickwire processes, why, and for how long. The controller is Ighodalo Labs Ltd, 10, Ferrari Close, Alpha Grace Estate, Ibadan, Ibadan-Dugbe, Oyo State, Nigeria, 200285. Tickwire is operated by Ighodalo Labs Ltd, a private company limited by shares registered in Nigeria with the Corporate Affairs Commission (RC 9713283). Privacy contact: hello@tickwire.io.
What we process and how long we keep it
| Data | Why | Kept for |
|---|---|---|
| Your name, email and company | Running your account, billing, support | While your account is open, then 6 years for tax records |
| Broker login, server and password | Logging the terminal in | Until you delete the trading account; deleted within 7 days of termination |
| Trading data (balances, positions, orders, deals, prices) | Providing the API | Until you delete the trading account, then 90 days for audit and dispute handling |
| Audit log (time, actor, reason, request, outcome) | Security, dispute handling, investigating incidents | 1 year |
| Pre-trade hook decisions (the order, the decision, your guard’s message) | Showing what your guard allowed, denied or held | The same as the audit log |
| API request logs (IP address, path, status, timing; secrets redacted) | Security, rate limiting, debugging | 30 days |
| Dedicated IP ownership history (which customer held which dedicated IP) | Answering broker or customer queries about activity from that IP, and proving an IP was never given to another customer | 24 months after the IP is cancelled |
| Subscription state and billing events from our merchant of record | Deciding what you can deploy | While your account is open, then 6 years |
| Payment card details | Billing | Held by our payment provider (merchant of record), never by us |
Dedicated IP history
We keep the record of which customer held which dedicated IP for 24 months after the IP is cancelled, to answer broker or customer queries about activity from that IP. A dedicated IP is never given to another customer; see the terms.
Broker credentials
Broker passwords are write-only. They’re encrypted at rest, decrypted only inside the account’s own terminal container when it logs in, and never shown back to you or anyone else. They never appear in logs, error messages, audit records or webhooks. See Security.
The audit log
Every change to an account (orders, modifications, closes, deploys) is recorded with the actor that made it (a person, a key, or an AI agent acting through a key), the reason given, the request and the outcome. You can read your own audit log through the API. We don’t edit audit records; they’re deleted when their retention period ends.
AI agents
If you connect an AI agent to Tickwire, we receive what the agent sends us: its requests, and the reason it gives for each trade. We don’t receive your conversations with the agent.
Your customers’ data
When you connect an account belonging to your own customer (for example, a trader using a tool you built), you’re the controller for their data and we process it on your behalf. A data processing agreement for business customers is available on request: email hello@tickwire.io.
Legal bases
Contract (running the service you signed up for), legitimate interests (security, fraud prevention, dispute handling, improving reliability) and legal obligation (tax records).
Processors
Contabo GmbH and Hetzner Online GmbH for the MetaTrader terminals and dedicated IPs (EU); Fly.io for our API services and database; Google (Firebase) for this website and for dashboard sign-in; our payment provider as merchant of record for payments, which runs the card checkout, keeps your card and charges it. We’ll list any change here before it takes effect.
Your rights
You can ask for a copy of your data, a correction, deletion, or a restriction of processing, and you can object to processing based on legitimate interests. Email us; we’ll answer within one month. Some records (tax records, and audit records within their retention period) may have to be kept. You can also complain to your data protection authority.
This website
The site is static. It sets no cookies and uses no third-party analytics or trackers. The status page fetches a JSON file from our own domain.