Privacy Policy

Controller

The controller responsible for FxAtlas is Theo Ucar, Enzianstrasse 93, 86343 Koenigsbrunn, Germany.

Email: support@fxatlas.trade

Contact form: fxatlas.trade/contact

Data processed

FxAtlas may process email address, password hashes, account role, beta access status, email verification status, session metadata, hashed IP fingerprints, user-agent information, verification tokens, password reset tokens, 2FA settings, security events, request timestamps, contact form messages and support communications.

Purposes and legal bases

Account creation, login, session handling, email verification, password reset, beta access management and support are processed to provide the requested service and account functions under Art. 6(1)(b) GDPR.

Security logs, abuse prevention, fraud prevention, service diagnostics and protection of model and data integrity are processed on the basis of legitimate interests under Art. 6(1)(f) GDPR.

Product update or marketing emails are sent only where there is valid consent under Art. 6(1)(a) GDPR or another applicable legal basis. Consent can be withdrawn at any time.

Service providers

FxAtlas uses service providers only where needed to operate, secure and support the beta service.

• Hosting and application infrastructure: Hetzner Online GmbH, Germany, for the currently running FxAtlas server deployment.
• DNS, CDN and security: Cloudflare, where configured for the fxatlas.trade domain.
• Email delivery: Resend for transactional emails such as verification, password reset and account notifications.
• Email mailbox and support address: Google Workspace for support@fxatlas.trade.
• Database: FxAtlas application database on the production server infrastructure.
• Monitoring and logging: FxAtlas application and server logs; additional monitoring providers may be used if configured.

Third-party market and macro data

FxAtlas may process data from public, licensed or connected market and macro data sources, including FRED, economic-calendar data, market-data services, Apify actors or other configured providers. Third-party source names, trademarks and datasets remain the property of their respective owners.

FxAtlas generally displays derived scores, model outputs and research context rather than redistributing raw third-party datasets, except where redistribution is permitted by the relevant source terms.

International transfers

Some providers may process data outside the European Union or European Economic Area. Where this happens, FxAtlas relies on appropriate safeguards such as adequacy decisions, standard contractual clauses or another lawful transfer mechanism.

Storage duration

Account data is stored while the account exists and is deleted or anonymised when the account is deleted, unless legal retention obligations or security requirements require longer storage.

Email verification tokens expire after 30 minutes. Password reset tokens expire after 30 minutes. MFA login challenges expire after 10 minutes.

Session records are retained until the session expires or is revoked; standard user sessions currently expire after 30 days. Security logs are retained for up to 180 days unless longer retention is required to investigate abuse, security incidents or legal claims.

User rights

Users may request access, correction, deletion, restriction of processing, data portability and objection to processing where the legal requirements are met. Users may also withdraw consent at any time for future processing.

Users have the right to lodge a complaint with a data protection supervisory authority, in particular the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, Germany.

Cookies and sessions

FxAtlas uses technically necessary cookies or comparable session mechanisms for login, CSRF protection, security and account access. Optional analytics or marketing tracking should only be enabled with a valid legal basis and appropriate consent where required.