Privacy Policy
Information about how BLUE BOAT LTDA processes personal data, for which purposes and what rights may apply.
1. Controller
Trading name: BLUEBOAT
Ipanema
22410-905 Rio de Janeiro – RJ
Brazil
2. Scope
This Privacy Policy applies to xblueboat.net and the BlueBoat services offered through it, including product and information pages, checkout and licensing functions, customer accounts and, where used, journal/account functions.
Where the EU General Data Protection Regulation (“GDPR”) applies, personal data is processed in accordance with its principles and legal bases. Brazilian data subjects may additionally be protected by the Lei Geral de Proteção de Dados (“LGPD”); Swiss data protection law applies where relevant.
3. Categories of personal data
- identity and billing-country information;
- contact data such as email address, phone number or WhatsApp number;
- MT5-related licensing data, including MT5 login, broker and server;
- order, contract, payment and accounting information;
- account and authentication information for protected customer areas;
- where journal functions are used: trading and journal information submitted or technically synchronized by the user;
- technical access data such as IP address, timestamp, browser/device information, requested URL and security/server logs.
4. Purposes and legal bases
| Purpose | Legal basis where GDPR applies |
|---|---|
| Website operation and technical security | Art. 6(1)(f) GDPR – legitimate interest in secure and reliable operation |
| Pre-contract enquiries | Art. 6(1)(b) GDPR |
| Checkout, contract, licensing, activation and support | Art. 6(1)(b) GDPR |
| Accounting, tax and statutory retention | Art. 6(1)(c) GDPR |
| Fraud prevention, misuse protection and legal defence | Art. 6(1)(f) GDPR |
| Non-essential cookies or external content where consent is required | Art. 6(1)(a) GDPR |
5. Website hosting – Squarespace
The website is operated using Squarespace. When the site is accessed, technical information may be processed for delivery, stability, security and, depending on activated settings and any required consent, analytics functionality.
6. Cloudflare
Cloudflare may be used for network, security and performance functions. Technical connection data, particularly IP addresses and network metadata, may be processed.
On selected checkout pages, technical country information may be used to preselect a currency or billing country. The user’s selected billing country remains decisive.
7. Stripe
Stripe is used for payment processing. Card and payment data are entered directly in Stripe’s hosted environment. BLUE BOAT LTDA does not generally receive complete card details, but receives transaction information required for contract performance, payment status and accounting.
8. Supabase
Supabase is used for backend functions including authentication, licensing, protected account functions, linking a license to an MT5 login and, where used, storing or synchronizing journal information.
9. Email and WhatsApp
If you contact us by email or WhatsApp, or provide a WhatsApp number during checkout, we process contact information and message content to respond to your request, perform the contract or provide technical support.
10. YouTube content
The Live page may embed YouTube players using YouTube’s privacy-enhanced mode via youtube-nocookie.com. Loading or using an embedded player may transmit technical information to Google/YouTube.
11. Cookies and similar technologies
We distinguish between technically necessary technologies and technologies used for analytics, convenience or external content. Where consent is legally required, non-essential technologies are used only after the relevant consent choice.
12. Recipients and processors
- Squarespace – website hosting and website functionality;
- Cloudflare – network, security and performance;
- Stripe – checkout and payment processing;
- Supabase – database, authentication and backend functions;
- Google/YouTube – embedded video content;
- communications/email providers where required for support.
13. International transfers
BLUE BOAT LTDA is established in Brazil. Personal data may therefore be transferred between the European Economic Area and Brazil. Where applicable, recognised transfer mechanisms, including adequacy decisions or other legally recognised safeguards, are used.
Technical service providers or their subprocessors may also process data in other countries, including the United States, subject to the applicable legal safeguards.
14. Retention
Personal data is retained only for as long as necessary for the relevant processing purpose. Contract, payment and invoice data may be retained longer where required by law, for evidence or limitation periods.
15. Required information
Certain information is required to conclude and perform a license contract, including contact, billing and MT5 information necessary for license binding. Without this information we may be unable to perform the contract or activate the product.
16. Automated decision-making
We do not use the website and licensing functions to make solely automated decisions that produce legal effects or similarly significantly affect you.
17. Your rights
Where GDPR applies and the legal requirements are met, you may have rights including access, rectification, erasure, restriction, data portability, objection and withdrawal of consent with future effect.
Requests may be sent to hello@xblueboat.net. You may also have the right to lodge a complaint with a competent supervisory authority.
18. EU representative under Article 27 GDPR
Name/company, address and contact details of BLUE BOAT LTDA’s formally appointed representative in the European Union, where Article 27 GDPR applies.
19. Security
We use appropriate technical and organisational measures to protect personal data against loss, manipulation, unauthorised access and unlawful processing.
20. Changes to this Privacy Policy
We may update this Privacy Policy when services, technical systems or legal requirements change.
Last updated: 25 July 2026