Legal
Privacy Policy
Last updated 3 September 2026
Who we are
Growth Club (“we”, “us”) operates growthclubpk.com, a private trading community offering XAU/USD signals, an AI trading bot service and a TradingView indicator. We are based in Pakistan.
For any privacy question, or to request a copy or deletion of your data, email admin.growth.club@gmail.com.
What we collect, and why
We only collect what the service needs to work. We do not buy personal data, and we do not sell yours.
| Data | Why we hold it |
|---|---|
| Email address and password | To create and secure your account. Passwords are hashed by our authentication provider — we never see or store the plain text. |
| Name and phone number | To identify you when reviewing an activation, a payment or a support request. |
| Broker account ID (Exness / XM) | To confirm you joined through our partner link, which is what unlocks free access to the signals. |
| Payment screenshots and transaction hashes | To verify USDT payments for membership and the indicator by hand. Card payments are confirmed automatically and need no screenshot. Screenshots are stored in a private bucket, readable only by you and our admins. |
| MT5 account number, server and password (AI Bot only) | Supplied by you if you apply for managed bot trading, so the bot can connect to your account. Given only if you choose to apply. |
| Reviews you submit | Published on the indicator page under the display name you choose, after our team approves it. |
| Push notification subscription | Only if you allow notifications. Used to alert you about signals, updates and approvals. Revoke it any time in your browser settings. |
| Usage analytics | Aggregate page views and visitor counts. No cookies, no cross-site tracking, no attempt to identify you individually. |
A specific note on MT5 credentials
If you apply for the AI Bot, you give us the login details for your MT5 trading account. We use them for one purpose only: connecting our bot to your account to place trades under the risk settings you chose. We never withdraw funds, and we do not have the ability to — withdrawals require your broker credentials, which are separate.
You can revoke access at any time by changing your MT5 password with your broker, or by asking us to stop the bot. Ask us to delete the credentials and we will remove them from our records.
Who we share data with
We share data only with the services that make the site run. Each is a processor acting on our instructions:
- Supabase — database, authentication and file storage for everything above.
- Vercel — hosting, and privacy-friendly analytics that count page views without cookies.
- Google AdSense — advertising on our public articles only. See the section below.
- Google (Gmail SMTP) — delivery of transactional email such as approvals and password resets.
We do not sell or rent your personal information to anyone, and we do not share it with advertisers.
Advertising and cookies
We show Google AdSense ads on our public articles under /insights. We do not run ads inside the members' dashboard.
Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this and other websites. Google's use of advertising cookies enables it and its partners to serve ads to you based on your visits to our site and other sites on the internet. These vendors may place and read cookies on your browser, or use web beacons and IP addresses to collect information as a result of ads being served on this website.
You can opt out of personalised advertising at Google Ads Settings, or opt out of a third-party vendor's use of cookies at aboutads.info. For details of how Google handles data on partner sites, see How Google uses data when you use our partners' sites or apps.
Beyond advertising, we use only the cookies needed to keep you signed in. We do not use tracking cookies for our own analytics.
How long we keep it
Account data is kept while your account is open. Payment verification records — screenshots and transaction hashes — are kept for up to two years so we can resolve disputes about access you paid for. MT5 credentials are deleted when you ask us to stop the bot, or when your account is closed.
Your rights
You can ask us to show you the data we hold on you, correct anything that's wrong, or delete your account and its data. Email admin.growth.club@gmail.com and we'll action it within 30 days. You can edit your name and phone number yourself from your account settings at any time.
Deleting your account removes your profile, broker details, payment records and any MT5 credentials. Reviews you published may remain, with your display name removed, unless you ask us to take them down.
Children
This site is for adults trading their own money. It is not directed at anyone under 18, and we do not knowingly collect data from children. If you believe a child has given us information, email us and we'll delete it.
Security
Data is stored with row-level security, so one member cannot read another's records. Payment screenshots live in a private bucket reachable only through short-lived signed links. Traffic is served over HTTPS. No system is perfect, and we'll tell you promptly if a breach ever affects your data.
Changes to this policy
If we change how we handle data, we'll update this page and move the date at the top. Material changes will also be announced in the members' updates feed.
Not financial advice. Nothing on this site is a recommendation to buy or sell. Trading leveraged markets carries real risk of loss. See our Terms of Service for the full disclaimer.