Market One Privacy Policy

Effective date: 12 October 2026

1. About this policy

This policy explains how personal data is handled when you use the Market One mobile app (the "App") and our website at https://marketone.click, including the broker directory behind the App (together, "Market One").

Market One is provided by DAY NIGHT SIGNS INC, 1715 N Graham St, Stephenville, Texas 76401-2201, United States ("we", "us", "our"). We are a technology and software provider only. We are not a broker, and we do not open trading accounts, hold client money or execute orders.

Market One is built so that we learn as little about you as possible. Your trading account belongs to your broker, and your account data travels directly between your device and your broker.

The general rules are in sections 2 to 15. Section 16 adds what specific laws require for people in particular countries and regions. If the law where you live gives you more rights than this policy describes, you have those rights.

2. Summary

• You do not create an account with us.
• When you sign in, your login details and trading instructions go directly from your device to the broker you choose, not to us.
• No advertising, no analytics, no tracking, and no sale or sharing of personal data for advertising.
• Your searches in the broker directory are not stored and are not linked to you.
• Biometric unlock is handled by your device. No biometric data leaves your device.
• Your broker decides how it uses your account data, under its own privacy notice.
• We receive personal data mainly when you write to us, and as basic technical data when the App or your browser contacts our server in France.

3. Who is responsible for your data

Two separate organisations are involved.

We are responsible (the "controller") for:

• the App software on your device;
• the broker directory and this website;
• messages you send us, such as support questions, privacy requests and reports about brokers.

Your broker is responsible (the "controller") for everything about your trading account. That includes your identity and verification documents, account details, deposits and withdrawals, trades and history, its messages to you, and its records of your sign-ins and devices. The broker decides what it collects, why and for how long, and explains this in its own privacy notice. You can find the broker's website and support contacts in the App (Account → contact your broker) and on the broker's page on our website.

When we work for brokers. Where we also supply or host a broker's trading platform, we handle that broker's client data only on the broker's instructions, as its service provider (a "processor"), under a written contract with the broker. We do not use that data for our own purposes. Questions and requests about that data should go to your broker; we help the broker to answer them.

4. What the App handles and where it goes

4.1 Biometric unlock

If you turn on biometric unlock, your device's operating system checks your face or fingerprint. The App receives only a "yes" or "no" answer. Your biometric data never leaves your device, and neither the App nor we can access it.

4.2 Your broker's web pages

For deposits, withdrawals, identity verification, profile changes and statements, the App asks your broker for a one-time sign-in link and opens the broker's own web page in your phone's built-in browser. What you enter on those pages, such as your name, card or bank details and identity documents, goes to your broker. The App cannot read it, and we do not receive it.

4.3 Contacting your broker

If you tap your broker's email address or phone number in the App, your phone's email or phone app opens. We do not see that communication.

4.4 Information from our directory

The App does not download a list of brokers. When you type at least 3 letters of your broker's name, the App sends that search text, the country from your phone's region setting and whether your phone runs iOS or Android to our directory, which answers with the brokers whose name matches. The search is answered and not stored. The App also asks our directory for the logos of the brokers it shows, the minimum supported App version, any service notice and the links to these legal pages. These requests contain no account data, only the technical details described in section 6. We deliver the brokers' logos ourselves, and we never pass searches on, so brokers cannot see who searched for them.

5. What we do not do

• We do not show advertising.
• We do not use analytics, tracking or advertising tools, and we do not track you across other apps or websites.
• The current version of the App does not use crash-reporting tools.
• We do not sell personal data, and we do not share it for cross-context behavioural or targeted advertising.
• The App does not access your location, contacts, photos, camera or microphone.
• We do not build profiles of you, and we do not make decisions about you based only on automated processing that have legal or similarly significant effects.
• We do not knowingly collect sensitive data (for example health data or data about your beliefs).

6. Our website and technical data

When the App or your browser contacts our directory or website, our server receives your IP address and basic technical details: the time, the address requested, and the App or browser version. We use these only to deliver the response and to protect the service, for example by limiting excessive requests. We do not use them to identify you, and we do not link them to any broker account.

Our web server keeps no access log. Our service's own technical logs do not record your IP address or the search text you type; your IP address is held in memory only for a short time, to limit excessive requests. If we ever need to keep logs that contain personal data, we will keep them for at most 30 days, unless we need them to investigate a specific security incident.

Our website and our public directory do not set cookies, and they use no advertising or analytics technology. The only cookie we use is a strictly necessary sign-in cookie on our own administration pages, which the public never visits.

7. When you contact us

If you email us, for example for support, with a privacy request or to report a broker, we use your email address, your message and anything you choose to send (such as your broker's name and your login name). We use them to answer you, to look into what you report and to keep a record of what we did.

Where it is needed to deal with your message, for example a request about your broker account or a report about a broker, we may pass the relevant details to the broker concerned. If you would rather we did not, tell us.

Never send us your password or a verification code.

We keep this correspondence for 24 months after the matter is closed, or longer if we need it for a legal claim or the law requires it.

8. Why we use personal data, and our legal bases

Some laws, such as the GDPR, the UK GDPR and Brazil's LGPD, require a "legal basis" for each use. Ours are:

Where we rely on legitimate interests, we have weighed them against your rights, and you can ask us for that assessment. We do not rely on consent for anything in the App today. If we ever do, for example for optional push notifications, we will ask first, and you can withdraw your consent at any time.

What the App sends to your broker (section 4) is sent at your direction, so that the broker can provide its service to you. Your broker's legal bases are explained in its privacy notice.

9. Who we share data with

We do not sell personal data, and we do not share it for advertising. We share the limited data we hold only with:

• service providers that host and run our directory, website and email, under contracts that allow them to use the data only on our instructions. Our server is hosted in France by our hosting provider;
• the broker concerned, when this is needed to deal with your request or report (section 7);
• professional advisers, such as lawyers and accountants, under a duty of confidentiality;
• courts, regulators, law-enforcement or other authorities, where the law requires it or where it is needed to protect people's rights or safety;
• a buyer or successor of our business, who must respect this policy.

The data the App sends to your broker (section 4) is sent at your direction, when you choose that broker and sign in.

10. Where data is stored, and international transfers

• Our directory and website are hosted in France (European Union).
• We are a company in the United States, so the people who run Market One may access the data we hold from the United States. Our email may also be stored or handled outside your country.
• Your broker's servers may be in another country. See your broker's privacy notice.

When personal data is transferred from the European Economic Area, the United Kingdom or Switzerland to a country that does not have an adequacy decision, such as the United States, we use the European Commission's standard contractual clauses, with the UK International Data Transfer Addendum and the Swiss amendments where they apply, or another lawful safeguard. We apply the same protection to data from other countries whose laws restrict transfers (see section 16). You can ask us for a copy of the safeguards at privacy@marketone.click.

11. How long data is kept

• On your device: until you sign out, remove the saved account, change the setting, or delete the App. To be sure that no sign-in remains on your device, sign out or remove your saved accounts before deleting the App.
• Directory searches: not stored.
• Technical data: IP addresses are not logged; any log that contains personal data is kept for at most 30 days, except as described in section 6.
• Messages to us: 24 months after the matter is closed (section 7).
• Your broker: under its own privacy notice and the law. Financial firms are often required to keep identity and transaction records for five years or more after an account closes.

When we no longer need personal data, we delete it or make it anonymous.

12. Security

• Everything the App sends travels over encrypted connections (HTTPS and secure WebSocket). The App connects only to brokers' secure (https) addresses.
• Session keys are kept in your device's secure storage, and your password is not stored by the App. (Your phone's own password manager may offer to save it; that is your choice and stays with your phone.)
• You can end sessions at any time: sign out, or use "Sign out of all devices". Changing your password also ends your other sessions.
• Access to our directory's administration is restricted to named people, protected by a strong password, and administrative changes are logged. Secrets that let the directory read brokers' listings are stored encrypted.

No system is completely secure. If we learn of a personal-data breach that affects you, we will tell you and the authorities where the law requires. If you notice anything suspicious, contact your broker and write to us at support@marketone.click.

13. Your rights

Depending on where you live, you may have the right to:

• know whether we hold personal data about you, and get a copy of it;
• have inaccurate data corrected;
• have your data deleted;
• restrict or object to how your data is used, including where we rely on legitimate interests;
• receive your data in a portable format, or have it sent to another organisation;
• withdraw consent, where we rely on it;
• know who we share your data with;
• not be subject to decisions based only on automated processing (we make none);
• appoint someone to make a request for you, where the law allows;
• complain to a data protection authority.

For data we hold (section 3), write to privacy@marketone.click. We reply within one month, or sooner where the law where you live requires it. Where the law allows, we may extend this for complex requests, and we will tell you if we do. We may ask you for information to confirm who you are, but we will never ask for your password. Using your rights is free, and we will not treat you differently for using them.

If we refuse your request, we will tell you why. Where the law gives you a right to appeal our decision, reply to our answer with the subject "Appeal" and a different person will review it.

For data your broker holds, which is most of the data about your account, contact your broker. If you cannot reach your broker, write to us and we will pass your request on to it.

Because we hold very little data, we may hold nothing about you at all. In that case we will tell you so.

14. Children

Market One is only for adults aged 18 or over, and we do not offer it to children. It is not directed at children, and we do not knowingly collect children's personal data. If you believe a child has sent us personal data, contact us and we will delete it. Brokers are responsible for checking the age of their clients.

15. Deleting your account

You can ask your broker to delete your account from the App or on the web. See Delete your account for the steps, the timelines, and what your broker may have to keep by law. To have the correspondence we hold about you deleted, write to privacy@marketone.click.

16. Information for specific countries and regions

This section adds to sections 1 to 15 for people in the places listed. Market One is not offered in every one of them; the section applies wherever its law applies to our handling of your data.

16.1 European Economic Area, United Kingdom and Switzerland

• Controller: DAY NIGHT SIGNS INC, 1715 N Graham St, Stephenville, Texas 76401-2201, United States, privacy@marketone.click.
• Laws: the EU General Data Protection Regulation (GDPR), the UK GDPR and Data Protection Act 2018, and the Swiss Federal Act on Data Protection (FADP).
• Legal bases and transfers: see sections 8 and 10.
• Right to object: you can object at any time to our use of your data based on legitimate interests. We will stop unless we have compelling legitimate grounds, or need the data for legal claims.
• Complaints: you can complain to the data protection authority where you live or work, or where you think the law was broken. In the United Kingdom this is the Information Commissioner's Office, and in Switzerland the Federal Data Protection and Information Commissioner (FDPIC). We would appreciate the chance to deal with your concern first.
• Representatives. We have no establishment in the European Union, the United Kingdom or Switzerland. Where the law requires us to appoint a representative there, their details are listed below. You can always write to us directly at privacy@marketone.click.

16.2 Brazil

• Law: Lei Geral de Proteção de Dados (LGPD, Law 13.709/2018).
• Legal bases: the performance of a contract, our legitimate interest, compliance with a legal obligation, and the regular exercise of rights in legal proceedings (section 8).
• Your rights (Article 18): confirmation that we process your data; access; correction; anonymisation, blocking or deletion of unnecessary or excessive data; portability; deletion of data processed with consent; information about who we share data with; information about the possibility of refusing consent and its consequences; withdrawal of consent; and review of decisions made only by automated processing.
• International transfers: your data may be processed in France and the United States (section 10). We use safeguards that the LGPD accepts, such as standard contractual clauses.
• Contact: our privacy contact, who also handles requests that the LGPD directs to the person in charge of data processing (encarregado), is reachable at privacy@marketone.click.
• Complaints: to the Autoridade Nacional de Proteção de Dados (ANPD).

16.3 Canada, including Quebec

• Laws: the Personal Information Protection and Electronic Documents Act (PIPEDA), and in Quebec the Act respecting the protection of personal information in the private sector, as amended by Law 25.
• Consent: by using Market One you consent to the handling described in this policy. You can withdraw consent at any time, subject to legal or contractual limits; some features may then stop working.
• Person in charge: the person in charge of the protection of personal information at DAY NIGHT SIGNS INC can be reached at privacy@marketone.click.
• Outside Canada and Quebec: your information is stored in France and may be accessed from the United States (section 10). It may be accessible to courts and authorities there under their laws. Before we communicate personal information outside Quebec, we assess whether it will be adequately protected.
• Your rights: access, correction, withdrawal of consent, and in Quebec also portability and the right to ask that information be de-indexed where the law allows.
• Complaints: to the Office of the Privacy Commissioner of Canada, or in Quebec to the Commission d'accès à l'information.

16.4 Australia

• Law: the Privacy Act 1988 and the Australian Privacy Principles.
• Overseas disclosure: the personal information we hold is likely to be held in France and accessed from the United States (section 10). Your broker may hold your account data in other countries; see its privacy notice.
• Your rights: you can ask for access to, and correction of, the personal information we hold about you.
• Complaints: write to us first at privacy@marketone.click. We will answer within 30 days. If you are not satisfied, you can complain to the Office of the Australian Information Commissioner (OAIC).

16.5 Japan

• Law: the Act on the Protection of Personal Information (APPI).
• Business operator: DAY NIGHT SIGNS INC, 1715 N Graham St, Stephenville, Texas 76401-2201, United States. The name of our representative is available on request at privacy@marketone.click.
• Provision to third parties in foreign countries: the personal data we hold is stored in France (European Union) and may be accessed from the United States. Information about the personal-information protection systems of those countries is published by Japan's Personal Information Protection Commission. Our service providers there handle the data only on our instructions and under contracts that require measures equivalent to those the APPI requires.
• Security measures: we restrict access to named people, use encrypted connections, keep secrets encrypted, keep logs short, and review our measures regularly (section 12).
• Your rights: you can ask us to disclose, correct, add to, delete, stop using, or stop providing to third parties the retained personal data we hold about you, and to disclose records of third-party provision, at privacy@marketone.click.

16.6 Republic of Korea

• Law: the Personal Information Protection Act (PIPA).
• Items, purposes and retention: see sections 4 to 11.
• Overseas transfer of personal information (by our service providers, as part of running Market One):

• Destruction: when data is no longer needed, we delete electronic files so that they cannot be recovered.
• Chief privacy officer: our privacy contact at privacy@marketone.click handles privacy requests and complaints.
• Your rights: access, correction, deletion and suspension of processing, which you can also exercise through a representative.
• Complaints: you can also contact the Personal Information Protection Commission or the Korea Internet & Security Agency (KISA) privacy centre.
• Cookies: our public website sets none (section 6).

16.7 Singapore

• Law: the Personal Data Protection Act 2012 (PDPA).
• Data protection officer: you can reach the person responsible for our compliance with the PDPA at privacy@marketone.click.
• Your rights: access, correction and withdrawal of consent.
• Transfers: when your data is transferred outside Singapore (section 10), we make sure it is protected to a standard comparable to the PDPA.
• Complaints: to the Personal Data Protection Commission (PDPC).

16.8 United Arab Emirates

• Law: Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL), where it applies. The Dubai International Financial Centre and Abu Dhabi Global Market have their own data protection laws, which apply only to organisations established there.
• Your rights: to obtain information about, and access to, your data; correction; erasure; restriction; objection; portability; and to complain to the UAE Data Office.
• Transfers: your data may be processed in France and the United States (section 10), with the safeguards described there.

16.9 Kingdom of Saudi Arabia

• Law: the Personal Data Protection Law (PDPL) and its implementing regulations.
• Your rights: to be informed of how your data is collected and used; to access and obtain a copy of it; to have it corrected, completed or updated; to have it destroyed when it is no longer needed; and to withdraw consent where we rely on it.
• Transfers outside the Kingdom: your data may be processed in France and the United States (section 10). We transfer it only as the PDPL and its transfer regulations allow, and only the minimum needed.
• Complaints: to the Saudi Data and Artificial Intelligence Authority (SDAIA).

16.10 Türkiye

• Law: the Law on the Protection of Personal Data No. 6698 (KVKK). This section is our notice under its Article 10.
• Data controller: DAY NIGHT SIGNS INC, 1715 N Graham St, Stephenville, Texas 76401-2201, United States, privacy@marketone.click.
• Purposes and legal reasons: as in section 8. The KVKK's corresponding reasons are the establishment or performance of a contract, compliance with a legal obligation, the establishment, exercise or protection of a right, and our legitimate interests that do not harm your fundamental rights.
• Method of collection: electronically, through the App, our website and your emails to us.
• Recipients: as in section 9, including recipients abroad (section 10). We transfer data abroad only as Article 9 of the KVKK allows, for example with standard contracts.
• Your rights (Article 11): to learn whether your data is processed; to request information about it; to learn the purpose and whether it is used for that purpose; to know the third parties in Türkiye or abroad who receive it; to request correction, and deletion or destruction; to request that recipients be notified of these; to object to an outcome against you arising only from automated analysis; and to claim compensation for damage caused by unlawful processing. Send requests to privacy@marketone.click. We answer within 30 days.
• Complaints: to the Personal Data Protection Authority (KVKK Kurumu), after first applying to us.

16.11 South Africa

• Law: the Protection of Personal Information Act 2013 (POPIA), where it applies.
• Your rights: to be told that your information is being collected; to access it; to have it corrected, destroyed or deleted; to object to its processing; and not to receive direct marketing without consent (we send none).
• Contact: our information officer can be reached at privacy@marketone.click.
• Complaints: to the Information Regulator of South Africa.

16.12 United States

Market One is not offered in the United States, but we are a United States company. If a United States privacy law applies to our handling of your data:

• California (CCPA, as amended by the CPRA). In the past 12 months we have collected: identifiers (such as email address and IP address); internet or other network activity (technical data); and the content of messages you send us. We collected them from you and your device, for the purposes in section 8, and disclosed them for business purposes to the recipients in section 9. We have not sold or shared personal information for cross-context behavioural advertising, and we do not use or disclose sensitive personal information to infer characteristics about you. Retention is in section 11.
• Your rights in California are to know, access, correct and delete your personal information; to opt out of sale or sharing (we do neither); to limit the use of sensitive personal information (we use none for that); and not to be discriminated against for using these rights. An authorised agent may make a request for you.
• Other states (including Colorado, Connecticut, Texas, Virginia and the other states with comprehensive privacy laws): you may have the rights to confirm, access, correct, delete and obtain a copy of your personal data, and to opt out of targeted advertising, sale and profiling (we do none of these). If we refuse a request, you can appeal as described in section 13. If your appeal is refused, you can contact your state attorney general.
• Global Privacy Control: we do not sell or share personal information, so there is nothing for such a signal to switch off.
• Make a request: write to privacy@marketone.click.

16.13 Other countries

If you live anywhere else, you have the rights your local law gives you. Write to privacy@marketone.click, and we will answer in line with that law. Where a law requires us to appoint a local representative or register with an authority, we will do so and list the details in this policy.

17. Changes to this policy

We will update this policy before the App changes the way it handles personal data. Future versions may add optional push notifications and crash reporting. Before any such feature is released, we will update this policy, and the privacy information on the app store pages, to describe exactly what is collected and why. Push notifications will always be optional.

Each version of this policy is published at https://marketone.click/privacy with its effective date. For significant changes, we will also tell you in the App.

18. Contact us

• DAY NIGHT SIGNS INC, 1715 N Graham St, Stephenville, Texas 76401-2201, United States
• Privacy questions and requests: privacy@marketone.click
• Other questions: support@marketone.click