ArmyTrader V5 Privacy Policy (English)
Controller: JAMES INVESTMENT GROUP Co., Ltd. (주식회사 제임스투자그룹) · CEO: MAENG SOMANG (JAMES) · Business Reg. No. 381-87-00458
Effective date: 2026-__-__ (store publication date) · If the Korean and English versions differ, the Korean version prevails.
“ArmyTrader V5” (package kr.co.jamesinvest.armytrader, the “App”) is a remote control that lets a member view and operate NinjaTrader 8 + JAMES SB running on the member’s own home PC. We are not a broker and do not hold customer funds. The App does not send orders to any exchange or broker directly; it passes the member’s instructions to the member’s own PC, which places orders in the member’s own account. The App has no ads, analytics or in-app payments.
1. Purposes
(1) Member authentication and sessions; (2) connecting only the member’s own PC and phones, delivering instructions and preventing duplicate execution; (3) displaying PC status (quotes, positions, charts); (4) alerting the member if the home PC disconnects while a position is open; (5) security and legal compliance.
2. Data we process and retention
| Data | How | Retention |
|---|---|---|
| Member ID, Telegram ID | Already held from license issuance; Member ID entered at login | While membership is active |
| Personal key (V5 license key) | Sent at login over TLS; server compares with a stored hash and never stores or logs the received key; encrypted on the phone with Android Keystore | Phone: until sign-out, 5 wrong PINs, clear data or uninstall. Server: hash only, while membership is active |
| Session token | Issued by the server; stored encrypted on the phone | Expires after 12 hours |
| Device ID (random per-install identifier) | Random UUID created by the App (not IMEI, phone number or advertising ID) | Phone: until uninstall. Server: in memory while connected |
| Order instructions and results | Phone → relay → member’s PC, and back | Server memory up to 24 hours; not written to disk |
| PC status (quotes, position summary, targets, last 10 fills, loss limit, chart bars, alerts) | Member’s PC → relay → member’s phone | Server memory only |
| IP address, access time | Automatically transmitted | ~1 minute in relay memory; infrastructure logs per Cloudflare’s policy |
| Rights requests (Member ID, contact, request text, hashed IP) | Submitted by you via the in-app deletion request, the web form or email | Erased when the request is completed; only a non-identifying record (number, date, result) is kept |
Kept only on the device: PIN (PBKDF2-SHA256 hash only, never sent), biometric results (handled by Android; the App receives only success/failure), text-to-speech. We do not process resident registration numbers, sensitive data, account passwords, payment data, advertising IDs, location, contacts, photos/files, camera or microphone. Permissions: Internet and biometric only.
Where Korean law requires retention (e.g. contract/payment records 5 years, complaint/dispute records 3 years under the E-Commerce Act; login records 3 months under the Protection of Communications Secrets Act), such records, if any, are stored separately for that period and then destroyed.
3. Sharing
We do not sell or provide personal data to third parties except with consent or where required by law.
4. Processors and international transfers
Cloudflare, Inc. (USA and global data centers; privacyquestions@cloudflare.com) hosts our relay and membership servers. Telegram (Bot API; telegram.org/privacy) delivers PC-disconnect alerts (Telegram ID and alert text) to the member’s own Telegram account. Transfers occur over TLS whenever the service is used. You may block our bot (@ArmyTraderAppBot) to stop alerts; refusing the Cloudflare transfer means the App’s login and connection features cannot be used.
5. Destruction
Data is destroyed without delay once its retention period ends or purpose is achieved, using methods that prevent recovery. In-memory server data disappears when the connection ends.
6. Your rights and account/data deletion
You may request access, correction, deletion, suspension of processing or withdrawal of consent at any time by email to traderjames@naver.com or via the account & data deletion page. Each request is reviewed individually and, after identity verification and internal approval by the CEO, completed within the legal deadline (10 days from receipt). Data that must be kept by law is stored separately for the legal period and then destroyed. On-device data can be removed anytime via Android Settings → Apps → ArmyTrader V5 → Storage → Clear data, or by uninstalling. A legal representative or authorized agent may also exercise these rights with a power of attorney.
7. Security
TLS (HTTPS/WSS) for all traffic; Android Keystore encryption on the device; server-side hash comparison of keys; signed 12-hour session tokens; per-member isolation; login rate limiting; minimal staff access; secrets kept only in the server’s secret store.
8. Cookies, pseudonymized data and automated decisions
The App uses no cookies, advertising identifiers, analytics or crash-reporting tools. We do not process pseudonymized data and make no solely automated decisions with significant effects.
9. Children
The App is for adult members only and is not directed to children under 14.
10. Privacy officer and contact
Privacy officer: MAENG SOMANG (JAMES), CEO · traderjames@naver.com
JAMES INVESTMENT GROUP Co., Ltd., Room 381, 10F, Cheongdam Venture Plaza, 704 Seolleung-ro, Gangnam-gu, Seoul, Republic of Korea
Korean remedies: Personal Information Dispute Mediation Committee (+82-1833-6972, kopico.go.kr), Privacy Infringement Report Center (118, privacy.kisa.or.kr).
11. Changes
Changes are posted on this page at least 7 days before they take effect (30 days for material changes). New processing such as push notifications (Firebase Cloud Messaging) will be added to this policy before it is enabled.