Privacy policy

1Who we are

PAYOUT is a software service operated by Moone Partners Limited, located at Lekki, Lagos, Nigeria.

In this policy, “PAYOUT”, “we”, “us” and “our” refer to Moone Partners Limited.

PAYOUT provides tools for users to organise account information, plan activity, review applicable programme rules and monitor their progress.

We are responsible for handling personal information as described in this policy, subject to the data protection laws that apply to our activities.

For privacy questions or requests, contact hello@getpayout.co.

2What information we collect

The information we collect depends on how you use PAYOUT.

Information you provide when creating an account

This may include:

  • Your name and email address.
  • Authentication and account-security information needed to maintain your account.
  • Information associated with two-factor authentication, where enabled.
  • Information received from Google if you choose to sign in with Google, such as your name, email address and profile picture.
  • If you subscribe: your subscription status and dates, your card type and last four digits, Paystack’s reference for your card, and a record of each charge, refund and cancellation.

Your account password is handled by our authentication provider. We do not store your password in readable form.

Information you enter or import

When you use PAYOUT, you may provide information such as:

  • Account or programme details.
  • Manually entered balances, equity figures and daily account figures.
  • Planned trade information, including instruments, position sizes, entry prices, stop-losses and targets.
  • Recorded trade outcomes and account history.
  • Information extracted from MT5 trading reports or calendar screenshots you choose to import. These files are read in your browser; only the figures taken from them are saved, and the files themselves are not sent to us.
  • Results of PAYOUT’s rule checks and related calculations.

This information is used to provide the features you request. Where it is linked to your account, it may constitute personal data.

PAYOUT’s account figures may be based on information you enter or import. Unless a supported live connection is explicitly available and identified as such, these figures should not be treated as independently verified, real-time broker data.

Information collected through normal service operation

Depending on the technical configuration, we or our service providers may process:

  • Authentication cookies required to maintain your session.
  • Browser storage used to remember your preferences.
  • Technical request and security logs, which may include IP addresses, browser information and timestamps.

We do not use advertising trackers or third-party analytics tools.

We use essential technologies to operate and secure the service. If this changes, we will update this policy as appropriate and obtain consent where legally required.

3How we use your information

We use personal information for the following purposes:

  • To create and maintain your account.
  • To provide the features you request.
  • To process the information you enter or import.
  • To calculate and display relevant rule checks, account figures and activity history.
  • To maintain account security and investigate suspected misuse.
  • To provide account-related communications, including necessary authentication or password-reset emails.
  • To respond to support requests.
  • To comply with applicable legal obligations.

We do not sell your personal information or use it for targeted advertising.

We do not send marketing emails without the appropriate permission where required by law.

4Legal grounds for processing

The legal grounds for processing depend on the applicable data protection law and the purpose of the processing.

Where the EU GDPR, UK GDPR or another law requiring a specified lawful basis applies, we will identify and document the relevant basis for each processing purpose.

These may include:

  • Contract: Processing necessary to provide the service you request or take steps at your request before entering into a contract.
  • Legitimate interests: Processing necessary for appropriate interests, such as securing the service and preventing abuse, where those interests are not overridden by your rights.
  • Legal obligation: Processing necessary to comply with applicable legal requirements.
  • Consent: Processing based on your consent where consent is the appropriate legal basis. Where applicable, you may withdraw consent without affecting the lawfulness of processing before withdrawal.

We will not rely on consent where another legal basis is required or more appropriate.

5Service providers and sharing

We use service providers to operate PAYOUT. They may process information on our behalf or independently where their own service terms and privacy notices apply.

We currently use the following providers:

ProviderPurpose
SupabaseDatabase and authentication services
VercelWebsite and application hosting
ResendAccount-related email delivery
PaystackSubscription payments. Card details are entered on Paystack’s page and held by Paystack; we keep the card type, last four digits and Paystack’s reference for charging it
GoogleOptional sign-in with Google
DerivLive price data, fetched directly by your browser
jsDelivrDelivery of the text-recognition tool used to read imported screenshots in your browser

We will share only the information reasonably necessary for the relevant service, subject to the applicable arrangements and law.

We may also disclose information where required by law or where reasonably necessary to protect the rights, security or integrity of PAYOUT and its users.

We do not sell personal information.

6International data transfers

PAYOUT is intended for users in Africa and other international markets. Personal information may therefore be processed in a country different from the country in which a user resides.

Where a transfer is subject to specific legal requirements, we will use an appropriate transfer mechanism and safeguards as required by the applicable law.

7Your broker’s terminal and third-party services

Where your broker’s MT5 web terminal allows it, PAYOUT embeds it within the application. Otherwise you trade in the broker’s own browser tab, guarded by the PAYOUT Guard extension described below.

PAYOUT does not read the contents of that embedded terminal or receive your broker password through it. Information you submit directly to your broker through its terminal is handled by the broker under its own terms and privacy policy.

PAYOUT may separately process account figures and trading information that you manually enter or import.

Third-party websites and services accessed through PAYOUT may have their own privacy practices. We are not responsible for the independent processing carried out by those providers.

8The PAYOUT Guard browser extension

PAYOUT Guard is an optional Chrome extension. It locks the buy and sell controls in your broker’s or prop firm’s web terminal until you have planned the trade in PAYOUT.

Where it runs

It runs on getpayout.co and only on the terminal websites you allow, one by one, through Chrome’s own permission prompt. You can remove a site, or the extension, at any time in Chrome’s settings.

What it reads

On an allowed terminal website, it reads the visible labels of trading controls, such as “Buy”, “Sell”, “Buy Limit” or “Modify”, to find them, and it notices when you click them.

It does not read or collect your broker login, password, account balance, positions or other page content.

What it stores and sends

  • The trade you approved in PAYOUT, such as “Buy 0.10 XAUUSD” and how long the approval lasts, kept in the extension’s storage on your device.
  • A short record each time a guarded control is used or blocked: the time, the website, buy or sell, and the reason for a block.

These records pass to PAYOUT through your open PAYOUT page and are then removed from the extension. PAYOUT saves the placed trade, or the blocked click with its reason, to your account, where it appears in your activity history. The extension does not send information to any other party.

The extension’s use of information is limited to providing this guard. It is not used for advertising, sold, or used to assess creditworthiness.

9How long we keep information

We retain personal information for as long as reasonably necessary for the purposes described in this policy, subject to applicable legal requirements.

Account information may include your name and email address, authentication records, and other information associated with your use of PAYOUT.

Account-related information and activity records may be retained while your account remains active. When you delete your account, we will delete or otherwise dispose of personal information in accordance with our deletion process and applicable law, subject to information we are legally required or permitted to retain.

Backup copies may remain for up to one month before being overwritten or otherwise removed through the applicable backup cycle.

When you delete your account, your subscription and saved card reference are deleted. The record of past charges, refunds and cancellations is kept, no longer linked to your account, for as long as tax, accounting and dispute rules require.

Information held by email, hosting, authentication or other service providers may be subject to separate retention periods under their services and our arrangements with them.

10Security

We use technical and organisational measures intended to protect personal information against unauthorised access, loss, misuse or disclosure.

These measures may include encrypted connections, access controls, database permissions and account-security features.

Access to stored information should be limited to what is necessary for the relevant purpose. No method of storage or transmission is completely secure, and we cannot guarantee absolute security.

If a personal data breach occurs, we will assess it and notify affected individuals and relevant authorities where required by applicable law.

11Your privacy rights

Depending on the law that applies to you, you may have the right to:

  • Request access to your personal information.
  • Request correction of inaccurate or incomplete information.
  • Request deletion of personal information.
  • Request a copy of certain information in a portable format.
  • Object to certain processing or request that it be restricted.
  • Withdraw consent where processing is based on consent.
  • Complain to the relevant data protection authority.

Some rights are subject to exceptions and legal conditions.

To submit a request, email hello@getpayout.co. We may need to verify your identity before responding.

We will respond within the period required by applicable law. Where a one-month response period applies, we will follow that period and any lawful extension rules.

You may also contact the data protection authority with jurisdiction over your circumstances.

12Age restrictions

PAYOUT is intended for people aged 18 and over. We do not knowingly seek to collect personal information from anyone under 18.

If we learn that we have collected personal information from a person who is not eligible to use the service, we will assess the situation and take appropriate action in accordance with applicable law.

13Changes to this policy

We may update this policy when our service, data practices or legal obligations change.

The latest version will be published on this page with an updated date. Where a change materially affects how we use personal information, we will provide notice and obtain consent where required by law.

14Contact us

For questions, concerns or requests relating to this policy or your personal information, contact:

Moone Partners Limited
Lekki, Lagos, Nigeria
Email: hello@getpayout.co

Last updated: 28 October 2026