Privacy Policy and Personal Information Collection Statement

1. Who is responsible for the data

RANVOL LIMITED, Company No. / Business Registration No. 79818696, at Unit 1706B, 17/F., Tower B, Viking Technology & Business Centre, 93 Ta Chuen Ping Street, Kwai Chung, Hong Kong, is the data user/controller for Ranvol personal data. Access, correction and privacy enquiries: info@ranvol.com.

2. Collection notice (PICS)

Name, email, password and required acknowledgements are needed to create and secure an account and enter the Agreement. Registration cannot proceed without them. Trading data, notes, strategies, files and requests are provided voluntarily, but the relevant feature may not work without the necessary data.

Data is used to provide the service, calculations and requested AI functions, maintain security and support, account for plans and usage allowances, process payments, comply with law and improve reliability. Necessary recipient classes may include cloud, AI, market-data, video, email, payment and professional providers described below, and public authorities where lawfully required.

Where a student account is assigned to a mentor or workspace, the assigned mentor, workspace owner and an authorised Ranvol administrator may view information needed for education, feedback, support and access administration: profile and email, trading accounts, trades and levels, risk, notes, setups, statistics, screenshots, school responses, attachments and feedback. This private information is not made public or available to other students. The only exception is content that the user separately and expressly publishes in Ranvol Pulse: the user's display name, post or comment text and server timestamp and, for a post, the instrument, chart image and aggregate reactions are visible to members of the same workspace, while email, the private journal and other private data remain undisclosed. Access to private information is controlled by the server-side assignment and ends for the relevant role after that assignment is removed; questions about assignment and access may be sent to the privacy contact.

An assigned mentor may request AI analysis of an assigned student's metrics. In that case, selected trading metrics and necessary context may be sent to the AI provider disclosed below; passwords, payment details and brokerage credentials are not included in that request.

A user may request access to and correction of personal data through the privacy contact. Ranvol may request reasonable verification and may charge only a fee permitted by law for handling an access request.

AI Psychology check-in answers and results, private notes and voluntary Replay exercise records are stored in the account's private history. Current AI dialogue text is processed only to provide the reply and remains in the site's current session memory; the site does not save messages or replies in account history or a separate database. The free urgent-help route is also not stored. Each reply may be sent to the configured AI provider with bounded current-session history; this does not promise the provider has no technical processing or logs under its terms. Optional records are sent only following the user's action, as described in section 6. The feature is intended for users aged 18 and over.

3. Data categories

• profile: name, email, language, role, settings and account identifiers;
• security: password hash, sessions, sign-in events, rate-limit and technical logs;
• trading: accounts, trades, levels, risk, commission, swap, setups, notes, emotions, mistakes and tags;
• files: chart screenshots, school assignments and other uploaded content;
• community feed: the display name, instrument, post or comment text, chart image, server timestamp and selected reaction that the user expressly publishes;
• analytics: selected instruments, requests, calculated metrics, AI prompts and responses;
• trader self-observation: voluntary non-clinical check-in answers and answer indices; private descriptions of events, thoughts, emotions, urges, plans and actions; an optional trade reference, practice-bar and Replay viewing-order metadata, server save times and consent records;
• education: course access, progress, submissions and feedback;
• subscription and commerce: plan, period, included, used, reserved and bonus allowance, operation log, amount, payment status and transaction identifier;
• support: messages and information needed to respond;
• device and network: IP, browser, approximate country, timestamps, cookies and diagnostic data available to the infrastructure.

4. Purposes of use

• creating, authenticating and maintaining the account;
• storing the journal, calculations, visualisation, export and requested analytics;
• displaying voluntarily published content, comments and aggregate reactions to members of the same workspace and moderating that content;
• processing an AI request and returning its result;
• providing private check-ins, a private journal and voluntary reflection practice in the simulator; non-clinical AI review requested by the user;
• managing plans, allowances, bonus grants, payments and refunds;
• support, security, abuse prevention and recovery;
• performing the Agreement and meeting legal, accounting and regulatory obligations;
• aggregated and de-identified quality measurement and service improvement.

5. Providers and recipients

Depending on the feature selected, data may be processed by Cloudflare/Sites and D1/R2, OpenAI and other configured AI, market-data and media providers disclosed for the relevant request. The exact set may change with the features, and Ranvol sends only data reasonably needed for the request.

Some backend requests send a provider only a ticker, period or public market parameter. A third-party iframe or video may directly receive IP, browser and cookie data when the relevant feature is opened. The provider's own terms and privacy notice apply separately.

To arrange a subscription, lava.top receives the account email, selected plan, currency, and information required for payment. Ranvol does not receive or store a full bank-card number or security code; the service stores the selected plan, currency, payment status, and safe order and subscription identifiers needed for activation, renewal, cancellation, refunds and dispute handling.

6. Data in AI features

When an AI feature is requested, Ranvol may send selected trading metrics, strategy text, the prompt and necessary market context to an AI provider. Do not include another person's personal data, passwords, API keys, identity-document numbers or payment details in a prompt, strategy or screenshot.

Ranvol minimises fields sent to AI and does not save dialogue text in its database. When calling OpenAI, the API request includes store: false: Ranvol does not ask OpenAI to retain the reply as an application object. This does not exclude technical processing or limited security-log retention under the provider's terms. Ranvol does not use private trading history to train its own generally available model.

In AI Psychology, the configured AI provider receives the current message and up to 10 recent messages from the current session memory. The latest check-in summary and its date are included only if separately selected. A user may also expressly choose one own trade and up to three private notes: a preview and confirmation are required before sending. Trade context includes the instrument, side, status, dates and result with R-data quality, not brokerage credentials, screenshots or the entire trading journal. Saving a note, opening the section, previewing context or navigating from Replay does not itself send it to AI. Once sent, content may be referenced in later messages in the current session and is not saved by the site. An explicit immediate-danger message may be replaced with standard urgent-help guidance before an AI request; recognition of every dangerous situation is not guaranteed. Do not use the feature instead of a local emergency service or qualified professional.

7. International processing

Ranvol and its providers may process data outside the user's country, including Hong Kong and locations used by cloud, AI and market-data providers. Legal protections may differ. Ranvol applies data minimisation and access controls and, where required and available for the relevant provider, uses applicable contractual transfer mechanisms. Current information about provider categories and known processing locations may be requested through the privacy contact; this statement does not promise storage in a single country.

8. Retention

Personal data is retained no longer than reasonably necessary for the stated purposes: while an account is active, then for a period needed for deletion, backup recovery, dispute resolution, acceptance evidence, security, accounting and legal compliance. Categories have different periods, and de-identified aggregates may be retained longer.

A user may request account closure and deletion. Ranvol will delete or de-identify data except information that must be retained by law, to protect a legal claim, prevent fraud, or preserve an immutable financial or contractual transaction ledger.

A user can delete an individual result, note or exercise record, or all stored AI Psychology data directly in the section. Clarifications to saved notes create new records with new timestamps; original records are not rewritten. Clearing the dialogue screen removes current messages from browser memory. Technical allowance records exclude message, note and selected-trade content. Data sent to an AI provider is processed to fulfil the request under that provider's terms.

9. Security

Ranvol applies proportionate measures including password hashing, secure session cookies, access controls, transport encryption, request limits, transaction logs and data minimisation. Absolute security cannot be guaranteed. The user should use a unique password and report suspected access.

10. User rights

Subject to applicable law, a user may request confirmation of processing, access to and correction of personal data, and where available deletion, restriction, objection, portability or withdrawal of voluntary consent. Rights are not absolute and may require identity verification.

Requests should be sent to info@ranvol.com. A user may also contact the Office of the Privacy Commissioner for Personal Data, Hong Kong, or a competent authority in their country.

11. Direct marketing

Accepting the Terms is not consent to advertising. If Ranvol offers marketing messages, consent will be separate, voluntary and unticked. A user may opt out free of charge at any time. Service messages about security, payment and legal changes are not marketing.

12. Changes and contact

If processing purposes or scope change materially, Ranvol will update the Policy, date and version, provide reasonable notice and obtain renewed consent where required. An archive of versions is retained to evidence the terms in force.

Privacy enquiries: info@ranvol.com. Postal address: Unit 1706B, 17/F., Tower B, Viking Technology & Business Centre, 93 Ta Chuen Ping Street, Kwai Chung, Hong Kong.