Effective as of 22 October 2026
Hecatek SARL, SIREN 930741277, 183 Chemin des Négadoux, 83140 Six-Fours-les-Plages, France.
Contact: infos@hecatek.com
EloTrades runs a partner programme: partners (content creators, trader communities) are given a link and a promotional code. This programme concerns three categories of persons.
a) Customers referred by a partner. If you accept the affiliate cookie after clicking on a partner's link, or if you enter their code when subscribing, we record your attribution to that partner: your account identifier, the pseudonym assigned to you (for example “C-7F3A2B”), the partner, the origin (link, code or both), the discount and rates applied, your Stripe customer identifier, the dates of the click, of the attribution and of the first payment, as well as the amounts excluding VAT of your invoices and of any refunds. The attribution is fixed at your first payment.
This data is used to apply your discount, to calculate any commission owed to the partner and to prevent fraud. No partner sees your name or your email address. A paid partner receives pseudonymised data about you, solely for the purpose of calculating and checking their commissions: your pseudonym, your subscription plan and billing frequency, dates and amounts excluding VAT. An unpaid “Community” partner sees only aggregate statistics (number of clicks, sign-ups and subscriptions), without any individual data. The affiliate cookie itself is subject to your consent (see the Cookie Policy). Clicks on partner links are counted in aggregate form, per day and per partner, without IP address or identifier.
b) Paid partners (“Affiliates”). We process the data necessary for the partnership agreement and for self-billing: company name, country, registration number, address, name of the representative, account and billing email, VAT status, supporting documents (signed agreement, extract from the company register, URSSAF certificate where applicable), commission statements and invoices.
c) “Community” partners (unpaid). We process their public name, their platforms, their account email and proof of their acceptance of the agreement: version of the agreement, date and time of acceptance and associated IP address. This information is used to administer the partnership and to keep proof of its acceptance.
Partner data is accessible only to the administrator of Hecatek SARL. Each partner has access only to their own area. Administrative actions are recorded in an audit log.
| Purpose | Legal basis |
|---|---|
| Creation and management of the account | Performance of the contract |
| Provision of the Service (journal, backtest, charts) | Performance of the contract |
| Billing and subscription management | Performance of the contract |
| Invoicing and tax obligations: issuing, transmitting and retaining invoices, transmitting the invoicing, transaction and, where applicable, payment data required by tax regulations | Legal obligation |
| Customer support and complaints | Legitimate interest / performance of the contract |
| Security and fraud prevention | Legitimate interest |
| Measuring the effectiveness of our campaigns (sign-up origin) and aggregate traffic statistics | Legitimate interest |
| Two-factor authentication and trusted device (if you enable it) | Performance of the contract (security of your account) |
| Setting and reading the affiliate cookie | Consent (may be withdrawn at any time) |
| Attribution to a partner, application of the discount, calculation of commissions | Performance of the contract (discount) / legitimate interest (remuneration of partners and fraud prevention) |
| Management of paid partners and self-billing | Performance of the contract; legitimate interest where the person acts on behalf of a company; legal obligation (invoicing, accounting, duty of vigilance) |
| Proof of acceptance of the Community agreement (version, date, IP address) | Legitimate interest (establishing and defending the rights of Hecatek SARL) |
| Handling a withdrawal (termination of the service, refund, acknowledgement of receipt) | Performance of the contract; legal obligation (French Consumer Code) |
| Proof of the withdrawal and of the request for immediate performance (name, email address, contract, date and time, amounts) | Legitimate interest (establishing, exercising or defending the rights of Hecatek SARL) |
| Compliance with legal obligations | Legal obligation |
| Processor | Location | Purpose | Safeguards |
|---|---|---|---|
| Back4App Inc. | European Union (Europe region hosting); company established in the United States | Storage of user data and server functions | Data processing agreement with EU Standard Contractual Clauses (possible access from the United States) |
| Vercel Inc. | United States | Hosting, infrastructure and storage of screenshots | EU Standard Contractual Clauses |
| Stripe Inc. | United States / Ireland | Payment processing | EU Standard Contractual Clauses |
| Google LLC | United States | Sign in with Google (OAuth), if you use it | EU Standard Contractual Clauses |
| EloTrades paid partners | France / outside the EU depending on the partner | Pseudonymised data of the customers they referred (pseudonym, plan, dates, amounts excluding VAT), for the calculation of their commissions | Partnership agreement (confidentiality, prohibition of re-identification) |
| Mistral AI | France | AI engine for the psychology coach and analyses | European Union |
| Anthropic PBC | United States | Macroeconomic analyses of the calendar and weekly summaries of economic news (no personal data transmitted) | EU Standard Contractual Clauses |
| Discord Inc. | United States | Internal receipt of support messages | EU Standard Contractual Clauses |
| Neon Inc. | European Union (Frankfurt) | Database for the partner programme, two-factor authentication, invoicing, withdrawals and market data | Hosting in the EU; EU Standard Contractual Clauses (US company) |
| Qonto (Olinda SAS) | France | Issuing and sending invoices and credit notes; transmission of electronic invoices (approved platform); self-billing of paid partners | European Union |
| Elocea management application (internal tool of Hecatek SARL) | European Union / United States depending on hosting | Preparation of self-billing for paid partners (company name, representative, address, emails, VAT status, commission amounts) | Access restricted to the administrator of Hecatek SARL |
| Mailgun (Sinch) | European Union / United States | Sending by email of order and termination confirmations, information prior to the renewal of annual subscriptions, credit notes and acknowledgements of receipt of withdrawals | EU Standard Contractual Clauses |
| Electronic invoicing platforms and tax authorities (DGFiP) | France | The approved platform chosen by HECATEK (Qonto), the platforms needed to route electronic invoices and the French tax authorities, limited to the data required by the regulations | Legal obligation |
As some of our service providers are located in the United States, data may be transferred outside the European Union, in particular to Back4App, Vercel, Stripe, Google, Discord, Anthropic, Mailgun and Neon. No third-party script is loaded on the site: fonts are served from our own servers and no audience measurement tool is used.
These transfers are governed by standard contractual clauses adopted by the European Commission, supplemented where necessary by additional technical and organisational measures.
| Category | Indicative period |
|---|---|
| Identity and contact data | Duration of the account + 3 years after last contact |
| Trading and backtest data | Duration of the account, deleted after closure |
| Technical and session data | 12 months maximum for connection and security logs; duration of the session for the token |
| Support messages | 12 months after the request is closed |
| Invoicing data (invoices, credit notes, supporting documents) | 10 years (accounting retention, Article L.123-22 of the French Commercial Code) |
| Two-factor authentication | Until it is disabled or the account is deleted; trusted-device cookie: 30 days |
| Affiliate cookie | 30 days from the click on the partner link, or until you withdraw your consent |
| Attribution of a customer to a partner | Duration of the account; when the account is deleted, the link with it is erased and only the pseudonymised amounts are kept for the legal and accounting retention period |
| Partner data, statements and self-billing invoices | Duration of the partnership plus 5 years; statements and invoices: legal accounting retention period |
| Proof of acceptance of the Community agreement (including the IP address) | Duration of the partnership plus 5 years in a restricted-access archive, then automatic deletion (unless a dispute is pending) |
| Withdrawal (declaration, date and time, request for immediate performance, calculation and refund) | 5 years from the withdrawal in a restricted-access archive, then deletion (unless a dispute is pending); credit notes and refund records: 10 years (accounting retention) |
| Proof of acceptance of the Terms of Use (account identifier, version, date and time, sign-up method) | Lifetime of the account, then 5 years in a restricted-access archive (proof of consent) |
| Sign-up origin | 13 months from sign-up; erased earlier if the account is deleted |
| Aggregate traffic statistics (number of visits per day and per source, no personal data) | 25 months |
In accordance with the applicable regulations, you have the following rights: right of access, right to rectification, right to erasure, right to restriction of processing, right to object, right to data portability.
You can at any time download all your data in JSON format (“Export my data” section of the settings) and permanently delete your account (“Delete account” section).
For any other request: infos@hecatek.com or by post to our registered office. We respond within one month, which may be extended by two months for complex requests. Proof of identity may be requested in case of reasonable doubt.
We implement reasonable technical and organisational measures designed to protect personal data against destruction, loss, alteration, disclosure or unauthorised access.
For more information on the cookies used, please see our Cookie Policy.
If you consider that your rights have not been respected, you may lodge a complaint with the CNIL (the French data protection authority): https://www.cnil.fr. You may also lodge a complaint with the supervisory authority of your country of residence.
Last updated: 23 October 2026