Privacy and Cookie Policy

Data we collect

• Account data, such as your name, email address and phone number.
• Application data you submit through our forms, such as waitlist, affiliate, partnership or career applications, including any CV you upload.
• Usage and device data, such as pages viewed, actions taken, browser type, approximate location and log data.
• Payment data, which is handled by our payment providers; we do not store full card details.
• Communications, such as messages you send to our support team.

How we use your data and our legal bases

We process your personal data for the following purposes and on the following legal bases under Article 6 of the GDPR:

• To provide and operate the platform and your account, on the basis of performance of a contract.
• To process payments and manage subscriptions, on the basis of performance of a contract.
• To respond to your enquiries and provide support, on the basis of our legitimate interest.
• To send you updates or marketing where you have asked to hear from us, on the basis of your consent.
• To keep the platform secure and to comply with our legal obligations, on the basis of legitimate interest and legal obligation.

Who we share data with

We do not sell your personal data. We share it only with service providers who help us run the platform, such as hosting and database providers, market data providers, analytics, email and payment processors, and with authorities where we are legally required to do so. These providers process data on our instructions under appropriate agreements.

International transfers

Some of our providers may process data outside the European Economic Area. Where this happens, we rely on appropriate safeguards such as the European Commission standard contractual clauses to protect your data.

How long we keep your data

We keep personal data only for as long as necessary for the purposes described in this policy, or for as long as required to meet legal, accounting or reporting obligations. When data is no longer needed we delete or anonymize it.

Your rights

Subject to the conditions in the GDPR, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request erasure of your data.
• Restrict or object to certain processing.
• Receive your data in a portable format.
• Withdraw consent at any time, without affecting processing carried out before withdrawal.
• Lodge a complaint with a supervisory authority, in the Czech Republic the Office for Personal Data Protection (Úřad pro ochranu osobních údajů).

Cookies

We use cookies and similar technologies to operate the platform, remember your preferences and understand how the service is used.

• Essential cookies, which are necessary for the platform to function and cannot be switched off.
• Analytics cookies, which help us understand usage so we can improve the service.

Managing cookies

You can control or delete cookies through your browser settings. Disabling some cookies may affect how the platform works.

Security

We use appropriate technical and organizational measures to protect your personal data against loss, misuse and unauthorized access. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Children

XF Charts is not directed at children and is intended only for users who are at least 18 years old. We do not knowingly collect data from children.

Changes to this policy

We may update this policy from time to time. When we make material changes we will update the date at the top of this page.

Contact us

For any privacy question or to exercise your rights, contact us at privacy@xflowtrading.com.