Etoro
- The documents do not say whether your data trains AI.
- Your data is used for personalized ads, including by third-party ad companies.
- Data is shared with partners and affiliates; you can opt out.
- The policy describes staff access for safety and legal checks.
eToro collects ID, money, and device data, can make trading public, keeps records for years, and uses ads and partners.
Agent Trust Hub uses AI and may make mistakes. Review reports and confirm their contents before relying on them.
Collected
They take ID papers, money details, device IDs, logs, and sometimes where your phone is.
Read the exact line
Privacy policy
“We collect information about the computer or mobile device you use to access our Services, including the hardware model, operating system and version, unique device identifiers, and mobile network information.”
Training
They use it for the account, legal checks, risk scores, marketing, and ads across the web.
Read the exact line
Privacy policy
“personalise and tailor our features, contents, products and services according to your interests and preferences, and make recommendations to you;”
Sharing
Group companies, banks, credit agencies, ad partners, and optional AI assistants can get your data.
Read the exact line
Privacy policy
“We will share your personal data with these business partners to offer, facilitate, and deliver these partnership services to you as part of our ”
Kept
They keep it while you have an account and then as long as laws say, which can be years.
Read the exact line
Privacy policy
“If you have an etoro Account, we will store your personal information for as long as you maintain that account, and after you cease holding an account, for as long as we are required to by laws and regulations that are applicable to us.”
Controls
You can update your profile, hide social trading, opt out of promo mail, and email privacy@etoro.com.
Read the exact line
Privacy policy
“You can update your Profile at any time by visiting the “Account” page in the Settings menu when logged into your etoro Account.”
Fine print
Policy can change; you should re-read it. Full court and payment rules are in PDFs not shown here.
Read the exact line
Privacy policy
“Any personal information held will be governed by our most current Policy. Please refer back to the Policy on a regular basis.”
Expand “Read the exact line” to see the source alongside the explanation.
What you can turn off
The controls and opt-outs their own documents describe, and where they say to find them.
Make trading activity private
https://www.etoro.com/settings/privacy and https://www.etoro.com/settings/notifications
Opt out of promotional emails
Instructions in those emails or the Notifications tab in Settings
Ask to access or delete data
Log into your account, www.etoro.com/customer-service/, or privacy@etoro.com
Disconnect a third-party AI assistant
Settings on your etoro Account
If a switch is not where they say, the deletion request above still applies.
Line by line
The lines that matter most, worst first.
If you use social trading, lots of what you share can be public by default.
Read the exact line
Privacy policy
“the following information and content shall be considered non-confidential and non-proprietary information (other than your personal data as described below), collectively, the “Content” and shall be publicly available”
For example, other users could see your username, full name, picture, and trade stats unless you change privacy settings.
Other companies can track you to show ads about eToro on other sites and apps.
Read the exact line
Privacy policy
“We may allow others to provide analytics services and serve advertisements about our products and services on our behalf across the web and in mobile applications.”
For example, after you visit eToro, you might see eToro ads on another website because of cookies.
If you hook up a third-party AI, eToro can send it your account, balances, and trade history.
Read the exact line
Privacy policy
“If you authorize a connection, we will disclose to the AI provider the categories of information covered by the permissions shown to you on the authorization screen, which may include your account and profile details, balances, and open and historical positions and orders.”
For example, a chatbot you connect could see your open positions; eToro will not delete that from the AI for you.
They can collect where your phone is if you allow it.
Read the exact line
Privacy policy
“In accordance with your device permissions, we may collect information about the geo-location of your device.”
For example, opening the app with location on could add your location to what they store.
They keep recordings of calls and other messages with support.
Read the exact line
Privacy policy
“Please note that we record and retain all telephone calls and other communication with us and may use it in our dealings with you, including any dispute resolution or legal proceedings.”
For example, a phone call about a trade could be stored and used later in a dispute.
Some records can be kept up to ten years because of financial laws.
Read the exact line
Privacy policy
“Gesetzliche Aufbewahrungsfristen ergeben sich unter anderem aus dem Handelsgesetzbuch (HGB), der Abgabenordnung (AO) und dem Wertpapierhandelsgesetz (WpHG). Sie betragen bis zu zehn Jahre.”
For example, even after you close the account, trade records may stay for a decade.
Computers score you and decide if products fit you.
Read the exact line
Privacy policy
“We use automated processing, including profiling, for purposes such as calculating risk scores, and carrying out suitability and appropriateness assessments, as described elsewhere in this Policy.”
For example, a risk score could limit high-leverage trading without a person deciding first.
You must be 18 or the local adult age. They say they do not knowingly collect from kids.
Read the exact line
Privacy policy
“etoro is not available for users under the age of 18 (or the age of legal consent for the the user is located in) (a “Minor”).”
For example, a 16-year-old should not sign up; if they do, eToro says it will delete that data if it finds out.
They say they use firewalls and encryption and want you to use 2FA.
Read the exact line
Privacy policy
“We protect your personal information by using data security technology and using tools such as firewalls and data encryption.”
For example, they ask you to turn on a code sent to your phone when you log in.
New rules apply to old data; they tell you to check the policy yourself.
Read the exact line
Privacy policy
“Any personal information held will be governed by our most current Policy. Please refer back to the Policy on a regular basis.”
For example, they could change how they use data and expect you to notice by re-reading the page.
Words to know
Legal words from the lines above, in plain English.
- device identifiers
- Codes that single out your phone or computer, used to recognise you across apps and sites. For example, the advertising ID on your phone lets two unrelated apps know they are seeing the same person.
- personal data
- Any information that is about you or can be linked to you, from your name to your phone's ID. For example, your email, your IP address and the list of apps on your phone are all personal data.
- legitimate interest
- A legal reason that lets a company use your data without asking, when it decides its own need outweighs your privacy. For example, an app may analyse how you use it to improve the product, without ever asking you.
- profiling
- Building a picture of who you are, what you like and what you might do next from your data. For example, an app may guess your income, health or politics from what you watch and tap.
- consent
- Your clear agreement to something, given by an action like ticking a box or tapping Accept. For example, a pop-up asking if the app may use your location is asking for consent.
- governing law
- Which country's or state's laws are used to settle any dispute, no matter where you live. For example, a user in Ohio may find the terms are judged under California law.
How we got here · grade D · score 34/100 · 15 of 15 policy answers backed by a verified quote · 5 not stated
What does the app collect beyond what it needs to work?
They collect account and KYC data plus device IDs, logs, cookies, geo-location, and data from social login and credit agencies.
Does it record your voice, face or body, and what happens to that?
Not stated in the documents.
Are your chats and uploads used to train AI models, and is that off by default?
Not stated in the documents.
Can employees or contractors read your conversations, and when?
They record calls and other messages and say they may use them for disputes, legal cases, and monitoring posted content and trading.
Are you profiled or tracked for advertising?
Others may run analytics and serve interest-based ads across the web using cookies and similar tools.
Do they sell or share your data, and can you opt out?
They share with group companies, vendors, credit agencies, and financial partners. Nevada residents can ask not to sell; they say they do not currently sell under Nevada law.
What rights do they take over what you type and what the AI makes?
Social trading content is treated as non-confidential and publicly available by default, though you can change privacy settings.
How long do they keep your data after you delete it, and can you delete it in the app?
You can ask to delete or deactivate, but they keep data as long as law requires, including periods of up to ten years in the German notice.
Does it build a lasting memory or profile of you, and can you see, edit or turn it off?
They build a trading Profile and automated risk scores. You can update the Profile, but there is no AI-memory off switch described.
Do they commit to basic security, and have they leaked data?
They describe firewalls, encryption, restricted office access, and two-factor authentication. No independent audit is named.
Is there a real age gate, and are teens protected?
The service is not for people under 18 (or local legal age). They do not describe a strong age check beyond that rule.
Will they tell you when the rules change, and is the policy specific?
The policy is dated September 2026. They say they update it from time to time and the newest version governs; the main text does not promise advance notice.
Can they close your account without warning, and can you get your data out first?
Not stated in the documents.
If something goes wrong, who pays?
Not stated in the documents.
Do subscriptions renew on their own, and can you get a refund?
Not stated in the documents.
The privacy policy is 11,154 words at a professional or legal expert level (Flesch reading ease 22.4); the terms are 488 words at a college level.
