This Privacy Policy describes how CFX Capital Pro ("we", "us") collects, uses, shares, and protects personal information when you use our copy-trading platform (the "Service"). By using the Service you consent to the practices described here.

1. Information we collect

1.1 Account information

Name, email, phone number, country, password hash, profile picture.

1.2 Identity and KYC data

When KYC is required by law or platform policy, we process government-issued identification, proof of address, and a biometric selfie via our verification partner. This data is stored only as long as legally required.

1.3 Trading and broker data

Broker account numbers, platform details, copy-routing identifiers, copy settings, historical trades, performance metrics.

1.4 Payment data

Invoices, amounts, cryptocurrency addresses, transaction hashes, and IPN metadata. Full card numbers are never processed on our servers; fiat rails are operated by third-party processors.

1.5 Technical data

IP address, device type, browser, user-agent, session tokens, audit logs.

2. How we use your data

To provide, operate, and improve the Service.
To verify identity and comply with anti-money-laundering obligations.
To communicate service notices, security alerts, and product updates.
To detect fraud, abuse, and policy violations.
To process subscriptions, performance fees, and withdrawals.

3. Sharing and disclosure

We share personal data only with the following categories of recipients under appropriate contractual safeguards:

Infrastructure providers (Supabase, Railway, Vercel).
KYC provider (e.g. Sumsub / Persona / Didit) when identity verification is active.
Payment processors (e.g. NOWPayments) for subscription and withdrawal settlements.
Our trade-routing provider, used solely to execute copy instructions on your behalf.
Regulators and law-enforcement authorities when required by law.

4. Data retention

We retain personal data for as long as your account is active, plus any period required to comply with tax, audit, or legal obligations (typically 5 to 7 years for financial transactions).

5. Your rights

Depending on your jurisdiction you have the right to access, rectify, erase, restrict, or port your personal data, and to object to certain processing. You can export your data from Settings → Account → Data export or request deletion from Settings → Account → Delete account.

6. Security

We apply industry-standard safeguards including TLS in transit, encryption at rest for sensitive fields, role-based access control, audit logging, and regular dependency patching. No system is perfectly secure; residual risk always remains.

7. International transfers

Your data may be processed in countries other than your country of residence. We rely on standard contractual clauses or equivalent mechanisms where required.

8. Cookies

We use essential cookies for authentication and anonymous analytics cookies to improve the product. See our Cookie Policy for detail.

9. Changes

We may update this policy to reflect product or legal changes. Material changes will be announced via email or in-app banner.

10. Contact

Privacy queries: privacy@cfxcapitalpro.com.