Who to contact
GoldR Systems, based in Berlin, Germany, operates this website, licensing API and customer portal and is responsible for the personal data described here. For privacy questions or requests, email sales@goldrsystems.com. We may ask you to verify that you control the relevant licensed email before disclosing or changing account data. If you message us on Telegram (@goldrsystems), Telegram also processes that conversation under its own privacy policy.
Data we receive
Nine kinds, each only where it applies. Open a card for the full text.
Access requestsName, email, request type, and any MT5 account, server or note you give.
Access requests: name, email, request type, and any MT5 account number, broker server or message you choose to provide, and the code of a friend's link you came through. To stop the form being flooded, we also keep a one-way code made from your network address for one day.
LicensingStatus, expiry, account binding, EA version, license checks.
Licensing: license status and expiry, MT5 account and broker server binding, EA version, license checks, service actions and technical data such as the IP address used for a license check, with the country, city and network name our hosting provider (Cloudflare) reads from that address.
Portal sign-inYour email, a six-digit code and a session cookie. Never your MT5 password.
Portal sign-in: your licensed email, a short-lived six-digit code, security rate-limit records and two essential cookies. Signing in never needs your MT5 password.
Our VPS (only if you chose it)Your MT5 trading password, encrypted, deleted when GoldR runs.
Our VPS (only if you chose it): the trading password of your licensed MT5 account, which you enter in the customer portal after paying. We store it encrypted; only the GoldR owner can read it, and only to log your account in to MetaTrader 5 and move it to the MQL5 VPS we rent for you. It never goes into emails, Telegram or the support assistant. We delete it from our records when GoldR runs on the VPS, when the account or license changes, or 14 days after you enter it at the latest. MetaTrader 5 keeps the login on that VPS, and in the MetaTrader 5 on our computer used to manage it, until you change the password or our VPS ends.
PaymentsAmount, NOWPayments id, status, and your consent time.
Payments: for each payment order the amount, the NOWPayments payment id and its status, the amount received, and the time you agreed that delivery starts at once.
First-month offerGoldR's trades of month one, and anything done by hand.
First-month offer: if your first paid live license has the offer, GoldR's trades closed in its first month, and anything the EA reports as done by hand on the account in that time. If the owner ends the offer after repeated trades by hand, your email and MT5 account go on a refusal list.
MT5 monitoringBalance, equity, positions, orders and deals the EA sends.
MT5 monitoring: if a connected GoldR EA (version 4.5 or newer) sends a heartbeat, we receive account-wide balance, equity and floating P/L, account/terminal details, open positions, pending orders, GoldR range state, account events and batches of deal history. This can include activity outside GoldR, including cash movements. The EA also sends its version and the time of its report; from GoldR 6.7 also its Risk setting, whether it runs on an MQL5 VPS, the broker's stop limits for gold and how many stop changes the broker refused that day; from GoldR 7.0 also how many stops or targets of GoldR trades were moved by hand that day, and when the last one was. From the connection itself we note the name of the network it comes from (for example a hosting company), to tell a VPS from a home computer.
Daily report on Telegram (optional)A link code and your chat ID, only if you turn it on.
Daily report on Telegram (optional): only if you turn it on in the portal: a one-time link code and your Telegram chat ID. After each trading day we send that chat a short report of your own MT5 account (balance, the day's change and GoldR's trades). Send /stop to the bot or turn it off in the portal to end it; the chat ID is then removed.
Reports by email (optional)Your day, week or month, from the same monitoring data.
Reports by email (optional): when you turn them on in the customer portal (the weekly and the monthly one are on until you turn them off), we email your licensed account's day, week or month: balance, the change and GoldR's closed trades, from the same monitoring data. You can turn each off in the portal at any time.
Balance and Equity describe the whole MT5 account, not GoldR profit. The owner admin can review full account telemetry for support. In the customer portal, you can see whole-account Balance/Equity but only GoldR-tagged open positions and deals; cash movements and other robots' trade details are not shown there.
Why we use it
We use requests and license details to respond to you, provide and manage approved access, and support your account. We use sign-in and technical records to secure the portal, prevent abuse and investigate service problems. Monitoring data supports your private account view, owner diagnostics, your monthly report and, if you have it, the first-month offer; it is not a public performance report or a trading-control service. After each trading day the owner's own computer also sets the GoldR trades of every licensed account beside the same day in the MetaTrader 5 Strategy Tester, to find where live trading differs from the test and improve the EA. Only the owner sees that comparison.
Where applicable, processing for your request and licensed service is based on steps at your request or performance of our agreement. Security and abuse prevention rely on our legitimate interest in protecting the service: each license check shows us where GoldR runs from, and a license key used on another MT5 account or broker server, or GoldR started with a key that does not exist, is recorded and reported to us. GoldR does not trade in those cases. We do not use the access form as a marketing subscription. To customers with a live license we may also write about our own offers, such as inviting a friend; you can object at any time by replying to any of our emails.
When you send a request, we may reply at once with an automatic email about what you chose. When you ask for the free demo month, we may first email you a 6-digit code: the demo month starts only when that code is entered on our website, so nobody can start one with your address. We also email you about your payment, your license and its setup; 7 days and 1 day before your license ends, and on the day it ends (with a Lifetime license on our VPS, 7 days and 1 day before its paid VPS month ends); when the EA stops reporting; when a new version is required; a report of your account in the first days of each month; when a friend's link brings days, the days added and the other person's first name; anyone who opens your invite link sees your first name on our homepage; and, if you have the first-month offer, its result and any warning about trades by hand. If you have a free demo month, we email you your own demo results about a week before it ends and again when it ends, from the data your EA reported.
Support assistant
The Ask box on our website and in the customer portal, and our replies to emails sent to sales@goldrsystems.com, use an AI assistant built on Claude, a model made by Anthropic. Its answers come from the text of this website and can be wrong; for anything important a person answers. Payments, refunds, account moves, complaints and legal questions always go to a person.
- Chat: what you write in the Ask box and the assistant's replies. To share the day's answers fairly, we also keep a one-way code made from your network address until the end of the day. In the customer portal, while you are signed in, it also reads your email address and your own licenses (status, expiry, bound MT5 account and broker server, EA version, the latest license check, whether your EA reports and whether MT5 lets it trade, whether GoldR runs on our VPS, and, if GoldR opens no new trades on your account, why: for example your account currency or a pause from our server) to answer questions about them. It never sees your license key or password and cannot change anything.
- Emails to sales@goldrsystems.com: every email still reaches us as before. We keep a copy (sender, subject and text; attachments stay only in our mailbox) and the assistant drafts a reply. While we have it switched on, a simple question about installing, VPS, prices, versions, the portal or the demo month may be answered at once by the assistant, only when our email provider has confirmed the sender's address; that reply says our AI assistant wrote it. Other questions may also be answered by an AI assistant without a person reading the reply first; payments, refunds, account moves and legal questions are not.
To answer, these texts are sent to Anthropic, which processes them for us under its commercial terms and does not use them to train its models. A license key pasted into the chat or quoted in an email is removed before anything is stored or sent. We use the assistant to answer you quickly, which is our legitimate interest and, for customers, part of our service. Only the owner reads the conversations and emails, in the protected admin. When we correct an answer or change a draft, we keep our reply as an example for later replies, and the question it answered for our own overview, both with email addresses and long numbers such as account numbers removed and the name in our greeting blanked; only our reply is used for later replies. You can ask us at any time to delete a conversation or an email copy before its 90 days end.
How long we keep it
The bars use a log scale, from one day to a year.
Kept longer, for a reason
The timed windows above are enforced by scheduled deletion. A portal sign-in code expires after 10 minutes. Its session stops working 7 days after sign-in or, if we keep browsers signed in longer, after up to 90 days without use and never later than 90 days after sign-in; sooner when you sign out (with the longer sessions, signing out on one browser signs out all of them) or when the same email signs in on more browsers than we allow at once. A demo month's code expires after 15 minutes. License, request and audit records do not currently have one automatic deletion period. We review those records when access ends or you make a privacy request, subject to records we must keep for legal or dispute reasons.
Your choices and rights
You may ask to access, correct or delete your personal data, or object to or restrict processing where applicable. You can also ask how to obtain a copy of information we hold about you. Send the request to sales@goldrsystems.com. Stopping the EA or disconnecting MT5 stops new EA heartbeats; it does not erase previously received data, so contact us for deletion requests. Applicable law may require us to keep some records.
Our portal uses two essential, HttpOnly cookies: one keeps you signed in, the other limits sign-in codes per browser, with a hashed record of that browser kept up to 90 days. Neither is used for advertising. The Ask box keeps your conversation in that browser tab (session storage) until you close it. A friend's link keeps its code in that browser (local storage) for 30 days, so its days can reach your purchase. While our videos are switched on, a browser that opens this site keeps a short note of that (local storage, no personal data), so the guide can load them. Once you have signed in to the portal, that browser also keeps the time of your last visit and how long its session lasts without use (local storage, nothing else), for that long (7 to 90 days), so the portal shows your licenses' outline at once while they load; signing out removes it. The portal also keeps its offline page and the app icon in that browser's cache (no personal data), so the portal added to a Home Screen can say when there is no connection. While you sign in, that browser also keeps the email you asked a code for and the time (local storage) for 10 minutes, so the code step is still there if your phone closes the app while you read the email; signing in removes it. This notice may change when the service or legal requirements change. The update date above will change with it.