NYOTAPrivacy policy
Effective 7 November 2026.
NYOTA is a trading platform in development, operated by Naintu Limited of Nairobi, Kenya ("we"). This policy explains what we collect when a trader connects an account to NYOTA, why, and the trader's rights under Kenya's Data Protection Act, 2019.
What we collect
- Your name, email address and sign-in details for your NYOTA account.
- From your broker, only after you grant access through cTrader: your trading account number, the account's currency, balance, equity, margin and leverage, and your orders, positions and trade history.
- The access token cTrader issues when you grant consent. We never ask for your broker password.
- The strategies you choose, the limits you set, and a record of every order NYOTA places or refuses.
Why we use it
- To run the strategies you choose on your account, and only those.
- To keep every trade within the capital and loss limits you set, and to refuse a trade when we cannot check it.
- To show you what happened and why, and to keep an audit trail.
- To keep the service secure and to meet our legal obligations.
We do not sell your data, use it for advertising, or use your trading data for any purpose other than running NYOTA for you.
How we keep it
Access tokens are kept encrypted in a secrets store and never written to logs. Access to data is limited to what each part of the system needs. Data is held with our hosting providers. Where that is outside Kenya, we use the safeguards the Data Protection Act requires.
Who we share it with
- Your broker and cTrader (Spotware), to read your account and place your orders.
- Service providers that host and run NYOTA for us, bound to protect it.
- Authorities, where the law requires it.
How long we keep it
We keep your data while your account is connected, and records of trades for as long as the law requires after that. Your access token is deleted as soon as you withdraw consent.
Your rights
You can withdraw NYOTA's access at any time, from NYOTA or from your cTrader account. You can ask to see, correct or delete your data, and object to its use. Write to hello@naintu.com. You may also complain to Kenya's Office of the Data Protection Commissioner.
Changes
We will post any change to this policy here, with its new effective date.