Privacy Policy

1. Who is responsible for your data

FXInsight is the controller of personal data processed through this service. You can reach the operator through the channels on the Contact page. Use a private message and do not post account or identity information in a public channel.

2. Data we collect

• Google account details: Google account ID, email address, email verification status, name, optional profile photo, and the profile fields Google returns when you choose Google sign-in.
• FXInsight account data: internal user ID, account creation date, membership status, timezone, and saved conditional-analysis names and configurations.
• Authentication and security data: short-lived login-verification values, access and refresh tokens, and technical request or error information needed to keep the service secure and reliable.
• Browser-local data: theme, recent weekly-analysis queries, calendar alert settings, event subscriptions, and dismissed-alert records. This information stays in your browser unless a feature explicitly sends it to the service.
• Usage analytics: pages viewed and features used (such as studies run and examples loaded), the referring site and campaign tags in the link you followed, browser and device type, and an approximate country. This is collected without cookies and is not linked to your account; see the Cookie Policy.
• Communications: information you choose to send when contacting FXInsight through Discord, X, or another published channel.

FXInsight does not use advertising cookies or cross-site tracking.

3. Why we use data and our legal bases

• To create your account, authenticate you, provide requested analytics, save your preferences, and keep saved analyses available. This is necessary to provide the service you request.
• To prevent abuse, diagnose failures, and protect the platform and its users. This is based on FXInsight's legitimate interest in operating a secure and reliable service.
• To understand how visitors find and use FXInsight so the service can be improved. This is based on FXInsight's legitimate interest in improving the service, using cookieless, aggregate-oriented analytics that do not identify you.
• To answer support, privacy, and feedback messages. This is necessary to respond to your request and, where relevant, based on legitimate interests.
• To meet tax, accounting, regulatory, or legal obligations if they apply.

FXInsight does not use your account data to make automated decisions that have legal or similarly significant effects on you.

4. Who receives data

Data may be processed by Google when you choose Google sign-in; by infrastructure providers that host the application, database, and operational systems; by PostHog, which processes usage analytics in the European Union on FXInsight's behalf; and by Discord or X when you choose to contact FXInsight through those services. These providers process data under their own terms or on FXInsight's instructions, depending on the service. Data may also be disclosed where required by law or reasonably necessary to protect users, the service, or legal rights.

FXInsight does not sell personal data.

5. International transfers

Some providers, including Google, Discord, and X, may process data outside the European Economic Area. Where FXInsight selects a processor that transfers personal data internationally, the transfer must be supported by an applicable adequacy decision or appropriate safeguards, such as standard contractual clauses. The provider's own privacy notice explains transfers it makes as an independent controller.

6. How long data is kept

• Account and profile data are kept while your account remains active and are deleted or anonymised after a valid deletion request, unless retention is legally required.
• Saved analyses remain until you delete them or your account is deleted.
• Access cookies expire after one hour and refresh cookies after 30 days. Signing out removes the active authentication cookies and invalidates the stored refresh token.
• Short-lived Google login security values expire after 10 minutes.
• Operational logs, where generated, are kept only for the period reasonably necessary for security, troubleshooting, and legal obligations, then deleted or aggregated.
• Usage analytics events are kept for up to one year by PostHog, then deleted.
• Browser-local data remains until you remove it in the relevant feature or clear site data in your browser.

7. Your rights

Depending on the circumstances, you may ask to access, correct, delete, restrict, or receive a portable copy of your personal data, or object to processing based on legitimate interests. You may withdraw consent at any time where consent is the legal basis. Withdrawal does not affect processing that was lawful before withdrawal.

Submit a request through the Contact page. FXInsight may need to verify that the request relates to your account. You may also complain to the Belgian Data Protection Authority if it is your competent authority, or your local data-protection authority.

8. Security and children

FXInsight uses technical and organisational safeguards designed to protect account data, but no online service can guarantee absolute security. The service is intended for people aged 18 or over and is not knowingly offered to children.

9. Changes to this policy

This policy may be updated when the service or legal requirements change. Material changes will be highlighted in the service where reasonably possible, and the date above will be updated.