ArmyTrader V5 Privacy Policy (English)
Controller: JAMES INVESTMENT GROUP Co., Ltd. · CEO: MAENG SOMANG (JAMES) · Business Reg. No. 381-87-00458
Effective date: 2026-10-06 · If the Korean and English versions differ, the Korean version prevails.
“ArmyTrader V5” (package kr.co.jamesinvest.armytrader, the “App”) is a remote control that lets a member view and operate NinjaTrader 8 + JAMES SB running on the member’s own home PC. We are not a broker and do not hold customer funds. The App does not send orders to any exchange or broker directly; it passes the member’s instructions to the member’s own PC, which places orders in the member’s own account. The App has no ads, analytics or in-app payments.
1. Purposes
(1) Member authentication and sessions; (2) connecting only the member’s own PC and phones, delivering instructions and preventing duplicate execution; (3) displaying PC status (quotes, positions, charts); (4) alerting the member if the home PC disconnects while a position is open; (5) security and legal compliance; (6) confirming that the member’s JAMES SB PC program is installed and working, and guiding fixes.
2. Data we process and retention
Website early-access sign-up (army-trader.com) — email (required), name and interests (optional), chosen language, country (country code only), time of consent, a hash of your IP address (the raw IP is not stored), and the referring partner if you arrived through a partner link. Purpose: sending launch and onboarding emails and preventing duplicate or abusive sign-ups. Retention: until one year after the official launch, or until you ask us to delete it.
| Data | How | Retention |
|---|---|---|
| Member ID, Telegram ID | Already held from license issuance; Member ID entered at login | While membership is active |
| Personal key (V5 license key) | Sent at login over TLS; server compares with a stored hash and never stores or logs the received key; encrypted on the phone with Android Keystore | Phone: until sign-out, 5 wrong PINs, clear data or uninstall. Server: hash only, while membership is active |
| Session token | Issued by the server; stored encrypted on the phone | Expires after 12 hours |
| Device ID (random per-install identifier) | Random UUID created by the App (not IMEI, phone number or advertising ID) | Phone: until uninstall. Server: in memory while connected |
| Order instructions and results | Phone → relay → member’s PC, and back | Server memory up to 24 hours; not written to disk |
| PC status (quotes, position summary, targets, last 10 fills, loss limit, chart bars, alerts) | Member’s PC → relay → member’s phone | Server memory only |
| IP address, access time | Automatically transmitted | ~1 minute in relay memory; infrastructure logs per Cloudflare’s policy |
| JAMES SB (PC program) install/operating status: Member ID, PC identifier (hash), JAMES SB and NinjaTrader versions, feature on/off and connection status (phone relay, V5 chart), the number of connected accounts and whether they are simulation or live, whether the quick order window is open, safety-lock state (reason text with account names/numbers removed) | Sent automatically by JAMES SB on the member’s PC at start, every 30 minutes and at exit (TLS). Account numbers/names, P&L, orders, PC name and IP are not collected | While membership is active (latest status plus change history); on a deletion request the PC identifier is replaced with an irreversible value and the rest is kept only as non-identifying statistics |
| Rights requests (Member ID, contact, request text, hashed IP) | Submitted by you via the in-app deletion request, the web form or email | Erased when the request is completed; only a non-identifying record (number, date, result) is kept |
Kept only on the device: PIN (PBKDF2-SHA256 hash only, never sent), biometric results (handled by Android; the App receives only success/failure), text-to-speech. We do not process resident registration numbers, sensitive data, account passwords, payment data, advertising IDs, location, contacts, photos/files, camera or microphone. Permissions: Internet and biometric only.
Where Korean law requires retention (e.g. contract/payment records 5 years, complaint/dispute records 3 years under the E-Commerce Act; login records 3 months under the Protection of Communications Secrets Act), such records, if any, are stored separately for that period and then destroyed.
3. Sharing
We do not sell or provide personal data to third parties except with consent or where required by law.
4. Processors and international transfers
Cloudflare, Inc. (USA and global data centers; privacyquestions@cloudflare.com) hosts our relay and membership servers. Telegram (Bot API; telegram.org/privacy) delivers PC-disconnect alerts (Telegram ID and alert text) to the member’s own Telegram account. Transfers occur over TLS whenever the service is used. You may block our bot (@ArmyTraderAppBot) to stop alerts; refusing the Cloudflare transfer means the App’s login and connection features cannot be used.
5. Destruction
Data is destroyed without delay once its retention period ends or purpose is achieved, using methods that prevent recovery. In-memory server data disappears when the connection ends.
6. Your rights and account/data deletion
You may request access, correction, deletion, suspension of processing or withdrawal of consent at any time by email to traderjames@naver.com or via the account & data deletion page. Each request is reviewed individually and, after identity verification and internal approval by the CEO, completed within the legal deadline (10 days from receipt). Data that must be kept by law is stored separately for the legal period and then destroyed. On-device data can be removed anytime via Android Settings → Apps → ArmyTrader V5 → Storage → Clear data, or by uninstalling. A legal representative or authorized agent may also exercise these rights with a power of attorney.
7. Security
TLS (HTTPS/WSS) for all traffic; Android Keystore encryption on the device; server-side hash comparison of keys; signed 12-hour session tokens; per-member isolation; login rate limiting; minimal staff access; secrets kept only in the server’s secret store.
8. Cookies, pseudonymized data and automated decisions
The App uses no cookies, advertising identifiers, analytics or crash-reporting tools. We make no solely automated decisions with significant effects.
Language preference — The website home page (army-trader.com) automatically opens the page in a suitable language based on your country (derived from your IP address, not stored) and your browser language. If you choose a language in the 🌐 menu, only that choice is stored in a cookie (at_lang, 1 year) so the same language is shown next time. It contains no personal information and you can delete it in your browser at any time.
Referral links — Only when you open a partner referral link (army-trader.com/r/… or armytrader.pages.dev/r/…), our membership server stores a random-number cookie (ar_v, extended up to 400 days on each visit) and records the link, time and a hash of your IP address and browser information (the raw IP is not stored), then immediately forwards you to our Naver Cafe. This is used only to pay the partner who first referred you if you later purchase a paid service, and is kept as settlement evidence. You can delete or block cookies in your browser without affecting the service. If you choose “which partner channel brought you here” on the payment page (optional), that choice is recorded for the same purpose only when no cookie/visit record exists.
9. Children
The App is for adult members only and is not directed to children under 14.
10. Privacy officer and contact
Privacy officer: MAENG SOMANG (JAMES), CEO · traderjames@naver.com
JAMES INVESTMENT GROUP Co., Ltd., Room 381, 10F, Cheongdam Venture Plaza, 704 Seolleung-ro, Gangnam-gu, Seoul, Republic of Korea
Korean remedies: Personal Information Dispute Mediation Committee (+82-1833-6972, kopico.go.kr), Privacy Infringement Report Center (118, privacy.kisa.or.kr).
11. Changes
Changes are posted on this page at least 7 days before they take effect (30 days for material changes). New processing such as push notifications (Firebase Cloud Messaging) will be added to this policy before it is enabled.