Privacy Policy
Last updated 21 October 2026
This policy explains what personal data IBCensus collects, why, who it is shared with, how long it is kept, and your rights under UK data protection law (the UK GDPR and the Data Protection Act 2018).
1. Who we are
IBCensus (ibcensus.com) is run by an individual sole trader based in the United Kingdom ("we", "us"). For anything about your data, contact us on Telegram @triseque.
2. Our two roles
- Controller for data about you as a customer: your account, payments, and security logs.
- Processor for data about your network (your clients and Sub-IBs) that you sync from the Vantage IB portal. You, the IB, decide to collect and use that data; we store and display it for you under the data processing terms in our Terms of Service.
3. What we collect
| Data | Why | Lawful basis |
|---|---|---|
| Account details: username, display name, password (stored only as a salted hash), role, access expiry, account status | To give you access to the dashboard | Contract |
| Your Vantage IB portal login (email and password, encrypted with AES-256) and the portal session cookies created when we sign in for you | To run the read-only sync you ask for | Contract |
| Network data synced from your Vantage portal: names, user IDs, account numbers, deposits, withdrawals, balances, trades, lots, rebates, IB hierarchy, and records of people who left your network | To show your network in the dashboard | Processed on your instructions (see section 2) |
| Labels and contact notes you add, such as a client's Telegram handle or phone number | To show them back to you | Processed on your instructions |
| Sign-in log: IP address, approximate country, browser user agent, and time of each successful sign-in | To protect accounts and spot shared or misused logins | Legitimate interests (security) |
| Security log: IP address, approximate country, browser user agent, the page requested and the username typed, when a request is refused (for example a failed sign-in) or an account is changed by an admin. Passwords are never recorded. | To detect and stop attacks on the site and on accounts | Legitimate interests (security) |
| Purchase records: Stripe checkout reference, plan, amount, the email you give Stripe, and your agreement to these terms | To deliver your licence key, handle support, and keep tax records | Contract and legal obligation |
| Messages you send us on Telegram or email | To answer you | Legitimate interests |
We do not use advertising, analytics, or tracking tools, and we do not sell personal data. Card details are entered on Stripe's checkout page and never reach us.
4. Who we share data with
- Stripe processes payments. See Stripe's privacy policy.
- Cloudflare provides our domain, DNS and secure tunnel, so traffic to the site passes through its network. See Cloudflare's privacy policy.
- Vantage Markets: when you run a sync, we sign in to the Vantage IB portal with the login you linked and read your data there. We do not send Vantage anything except that sign-in.
Stripe and Cloudflare may process data outside the UK, including in the United States. They do so under safeguards recognised by UK law, such as the UK Extension to the EU–US Data Privacy Framework or the UK International Data Transfer Addendum.
5. How long we keep it
- Account, Vantage login and network data: while your account exists. When an account is deleted, its data is deleted with it.
- Sign-in log: 90 days, then deleted automatically.
- Security log: 90 days, then deleted automatically.
- Purchase records: 6 years, as UK tax law requires.
- Support messages: as long as needed to resolve your request.
6. Security
Passwords are hashed with scrypt. Vantage portal logins and licence keys are encrypted. The site is served over HTTPS through Cloudflare, sessions expire after 60 minutes, and the sync can read your portal but cannot trade, move money, or change portal settings.
7. Your rights
You can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or send it to you in a portable format. Contact us on Telegram @triseque; we will reply within one month. If your request is about network data you synced, we will help you handle it as the controller of that data.
If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We would appreciate the chance to sort it out first.
8. Age
IBCensus is for professional introducing brokers and is not meant for anyone under 18.
9. Changes
If we change this policy, we will update the date at the top. Significant changes will be shown in the dashboard when you sign in.