Privacy Policy

1. What data we collect

Dizso collects the following data:

• Account data: first and last name, country, phone number and email address.
• Waiting list: email address and selected language, to notify you when the platform becomes available. You can request removal at any time.
• Identity verification (KYC): the documentation and data required by the procedure in the AML policy.
• Payment data for the transaction. Card details are handled by the payment provider; Dizso does not receive them.
• Payout data: the wallet address designated to receive profits.
• Platform activity.
• Public website usage: aggregated, anonymous usage statistics, which are not shared with third parties.
• Technical and security data: IP address and browser and device data, for session management and the detection of incidents and misuse. Deleted automatically after a short period.
• Connection with a third-party platform (optional): identifier, username and profile picture on that platform.

Dizso does not trade personal data with third parties.

2. What we use your data for

Data is processed for the following purposes:

• Providing the service: creating the account, running the simulated trades and applying the evaluation rules.
• Charging for the evaluation through the payment provider.
• Verifying identity and paying out profits, in compliance with AML rules.
• Protecting the account and the platform: authentication, two-step verification by email, session management and prevention of fraud and account sharing.
• Sending operational emails: registration confirmation, access reset, access code and notices about the status of the account and of withdrawals. These emails are necessary for the service and cannot be disabled while the account is active.
• Sending optional notices: if enabled in settings, an email is sent when a trade closes on take profit or stop loss. These can be disabled at any time.
• Notifying the platform launch to anyone who joined the waiting list.
• Aggregate measurement of website usage.
• Legal compliance: retention of the payment, withdrawal and identity verification records required by tax and AML rules.

Legal basis. Processing is based on the performance of the contract you accept when you register, on compliance with legal obligations and on Dizso's legitimate interest in keeping the platform secure and in understanding website usage anonymously. For optional notices, the waiting list and the connection with the third-party platform, the basis is consent, which can be withdrawn at any time.

3. Who we share your data with

Dizso does not sell or transfer personal data for commercial purposes. Only the providers necessary to deliver the service have access to the data:

• Payment provider: processes the purchase of the evaluation.
• Cloud storage provider: holds the identity verification documents in a private space.
• Email delivery provider: delivers the platform's messages.
• Hosting provider: operates the servers.
• The third-party platform, only if you enable the connection with your account.

All providers act on Dizso's behalf and in accordance with its instructions. Some may be located outside the European Economic Area; in that case, the transfer relies on the safeguards required by data protection rules. Dizso will disclose data to public authorities when required by law.

4. Cookies and similar technologies

A small number of cookies is used, all first-party and technical. No analytics, advertising or third-party tracking cookies are used; no cookie banner is shown.

• Necessary cookies (essential for the platform to work; cannot be disabled): session, platform linking and protection against fraudulent use.
• Preference cookies (can be cleared from the browser): browsing preferences and customisable features.

Cookieless analytics. Traffic is measured with a tool that sets no cookies or identifiers on your device and stores no IP address. Other technologies: some display preferences are stored in the browser and are not sent to Dizso's servers.

5. How long we keep your data

The retention periods are as follows:

• Account and activity data: while the account is active.
• Trading, payment and withdrawal records: for the periods required by tax and accounting rules, even after the account is closed.
• Identity verification data: for the period required by AML rules (see AML policy).
• Waiting list: until the platform launches or until removal is requested.
• Security and session data: access codes and temporary links expire within minutes or hours and are deleted automatically; sessions are deleted when closed or when they expire.
• Server technical logs: a short period, with automatic rotation.
• Website usage statistics: kept in aggregate form and cannot identify you.

When a piece of data is no longer needed for the stated purposes, it is deleted or anonymised.

6. What you can manage from the platform

Users manage the following directly from the platform:

• Viewing and updating profile data.
• Changing access credentials.
• Viewing and closing active sessions.
• Regenerating recovery codes.
• Linking and unlinking the third-party platform account.
• Adding and removing payout addresses.
• Enabling and disabling optional email notices.
• Removal from the waiting list via the link included in the emails.

7. Your data protection rights

You can exercise the following rights at any time:

• Access to the data processed and obtaining a copy.
• Rectification of inaccurate or incomplete data.
• Erasure of the data when it is no longer necessary, except records that must be kept by law.
• Restriction of or objection to certain processing.
• Portability of the data you provided.
• Withdrawal of consent, without affecting processing already carried out.

To exercise these rights, write to [email protected]. The request is answered within one month. If the response is not satisfactory, a complaint can be filed with the competent supervisory authority; in Spain, the Spanish Data Protection Agency (www.aepd.es).

8. Security

Dizso applies technical and organisational measures to protect the data: account access protected with two-step verification, credentials and access codes stored encrypted, identity documents in a restricted-access space and encrypted communications. Internal access to the data is limited to the staff who need it and is logged.

9. Minors

The service is intended solely for people over 18. Dizso does not knowingly collect data from minors under that age.

10. Changes to this policy

Dizso may update this policy to reflect changes to the platform or to the rules. The version in force is published on this page with its update date. Material changes are communicated by email.