Privacy Policy

1.1 Digital Edge Wave Legal Entity & Scope. The statutory Data Controller for all processing activities executed on or through the AlbaTherium trading platform, client desktop instances, and online subscription gateways is DIGITAL EDGE WAVE LTD (trading as AlbaTherium), a private limited company incorporated and existing under the laws of England and Wales (Company Registration No. 15074564), having its official registered office address at 483 Green Lanes, London, United Kingdom, N13 4BS.

1.2 Data Protection Officer (DPO) & Jurisdiction. DIGITAL EDGE WAVE LTD maintains a designated Data Protection Officer responsible for overseeing compliance with the United Kingdom Data Protection Act 2018 (UK DPA), the UK General Data Protection Regulation (UK GDPR), Regulation (EU) 2016/679 (EU GDPR), and the California Consumer Privacy Act (CCPA/CPRA). Inquiries or requests for formal Data Processing Addendums (DPAs) can be addressed directly to our legal desk at support@albatherium.com (Subject: Legal, Privacy or Compliance).

2.1 Identity & Profile Data. Legal full name, enterprise or personal email address, entity registration name and jurisdiction (for institutional desk accounts), contact country, and optional communication handles. We only collect the minimum parameters necessary for cryptographic license provisioning and user authentication.

2.2 Payment & Financial Telemetry. All billing records, tax remittance indicators, and transaction receipts are managed in compliance with international fiscal laws. Sensitive cardholder credentials (Primary Account Numbers and CVVs) are processed exclusively by certified third-party Level 1 PCI-DSS gateways (Stripe and Payabl) and are never stored or seen by DIGITAL EDGE WAVE LTD.

2.3 Trading & Brokerage API Access Tokens. User credentials for third-party brokerage conduits (including Rithmic 01/R|Trader, CQG, Interactive Brokers, Tradovate, and Databento) are stored exclusively in client-side AES-256-GCM local storage or sandboxed client memory. AlbaTherium servers never intake, store, or transmit your raw private brokerage API master secrets.

3.1 Platform Provisioning & Software Licensing. Authenticating active concurrent seat limits, issuing cryptographic workstation tokens, verifying terminal binary integrity, and unlocking proprietary indicator assemblies (Kinematic Venturius, WABISABI Adaptive Trend Engine).

3.2 Fraud Prevention, Dispute Handling & Security. Conducting automated sanity checks on session nonces, defending against credential stuffing, identifying bot attacks, and validating payment integrity in coordination with Stripe Radar and Payabl risk monitoring tools.

3.3 Exchange Compliance & Regulatory Declarations. Fulfilling mandatory data distribution audits required by derivatives and equity exchanges (CME Group, ICE, Eurex), ensuring users are accurately categorized and billed under professional or non-professional regulatory tariffs.

4.1 PCI-DSS Zero-Storage Tokenization (Stripe & Payabl). Payment clearing services for AlbaTherium are facilitated exclusively through authorized Level 1 PCI-DSS compliant third-party payment gateways: Stripe, Inc. and Payabl (payabl. solutions GmbH / Payabl Services). DIGITAL EDGE WAVE LTD categorically does not store, process, host, or transmit raw cardholder details (Primary Account Numbers [PAN] or Card Verification Values [CVV]) on its servers. All sensitive cardholder credential fields are tokenized directly via the payment processors' certified client-side SDKs and encrypted checkouts.

4.2 Anti-Fraud, Transaction Integrity & Merchant Descriptors. Transactions processed through Stripe or Payabl will appear on the cardholder's bank or credit card billing statements under the official identifying descriptors: DIGITAL EDGE WAVE LTD or ALBATHERIUM / DEW LTD. Machine-learning anti-fraud engines assess transaction telemetry (IP geolocation, 3D-Secure 2.0 biometric handshakes, address verification systems) without storing unencrypted personal banking data on our infrastructure.

4.3 Chargeback & Refund Protocols (14-Day Guarantee Alignment). In harmony with our Terms of Service, new subscribers to recurring tiers (Aurora, Horizon) are protected by a 14-day money-back guarantee. Customers agree to submit written claims to support@albatherium.com (Subject: Legal, Privacy or Compliance) prior to initiating external bank disputes, facilitating orderly refund fulfillment within 5 to 10 business days directly via Stripe or Payabl.

5.1 Authorized Reporting Conduits & Exchange Feeds. Real-time and historical market data pipelines across AlbaTherium are facilitated through verified conduits, including Rithmic, LLC and Databento Inc., delivering Level 1 (Top of Book), Level 2 (Full Market Depth / DOM), and Level 3 tick-by-tick order book telemetry. DIGITAL EDGE WAVE LTD acts strictly as an analytical visualization client and order-routing client interface, maintaining zero central storage of exchange telemetry streams.

5.2 Exchange Subscriber Declarations & Audit Protocols. Global derivatives and securities exchanges mandate verifiable subscriber classification before activating live order feeds. Subscriber declarations (Non-Professional vs. Professional declarations, subscriber identity, and exchange agreements) are logged, verified, and audited pursuant to regulatory frameworks:

5.3 Compliance Liability & Subscriber Declarations. Users warrant the strict accuracy of their subscriber status. Misrepresentation of Non-Professional status constitutes a breach of exchange rules and federal regulations, subjecting the subscriber to immediate entitlement revocation, retroactive professional billing adjustments, and regulatory referral under exchange audit protocols.

6.1 Zero Prompt Retention & Sandboxing. The AlbaTherium Candela engine and Model Context Protocol (MCP) tool integration layer are architected on strict memory safety guarantees. User quantitative queries, indicator weights, algorithmic script parameters, and trade order logic are never utilized for model training, reinforcement learning, or third-party syndication.

6.2 Zero-Knowledge Token Relays. All inference requests routed to underlying neural coprocessors execute in ephemeral, stateless memory enclaves. Context payloads are wiped immediately upon response delivery.

6.3 Local Telemetry & Isolation. Candela agent interaction logs and diagnostic signals remain stored locally on the client's workstation unless the client explicitly generates and submits an encrypted support diagnostic bundle.

7.1 Client-Side Secret Isolation. Desk secrets, private brokerage passwords, and trading API tokens are sealed using client-derived AES-256-GCM encryption with Argon2id salted master keys. AlbaTherium retains zero knowledge of your underlying brokerage execution passwords.

7.2 Enclave Relay Architecture. Sockets transferring data between client terminals and market aggregation pipes terminate in ephemeral memory spaces, preventing disk writes of transient streaming orderflow data.

7.3 Ephemeral In-Memory Keys. Authentication sessions are bound to short-lived JSON Web Tokens (JWT) signed with rotating Ed25519 keys, mitigating replay vulnerabilities.

8.1 Right to Erasure (Immediate Purge Protocol). Users may request complete erasure of personal data by submitting a formal claim to support@albatherium.com (Subject: Legal, Privacy or Compliance). Upon verified authorization:

8.2 Statutory Financial & Tax Recordkeeping. In compliance with the UK Companies Act 2006, HMRC requirements, and exchange market data regulations, corporate invoicing records, VAT declarations, and verified subscriber status forms are retained for a minimum period of six (6) to seven (7) years.

9.1 International Framework Rights. Under the UK Data Protection Act 2018, EU GDPR, and California Consumer Privacy Act (CCPA), you maintain guaranteed statutory rights:

9.2 DPO Contact & Companies House Verification. For regulatory audits, formal GDPR erasure requests, or verification of cryptographic compliance, our designated Legal & Compliance Office can be engaged directly: