Privacy Policy

1. Information We Collect

When you create an FXfolder account, we collect the following information:

• Name, email address, phone number, and country
• Telegram user ID (optional, for community delivery)
• Account credentials (passwords are hashed and never stored in plain text)
• Subscription and billing information processed through our payment processors (Razorpay, Stripe, Dodo Payments and ForumPay)
• For crypto payments, the ForumPay payment ID, the coin used and the payment address
• Usage data such as login timestamps and feature interactions
• For partners, before their first payout: identity verification data (a photo of an ID document and a selfie, checked by Didit, and the legal name, date of birth and document country read from it) and, for tax residents of India, their PAN

2. How We Use Your Information

We use your information to:

• Provide and maintain the FXfolder service
• Deliver community trade ideas and analysis through the dashboard and Telegram
• Process subscriptions and payments (card and crypto) via our payment processors
• Send service-related communications (account updates, billing)
• Improve the platform based on usage patterns

3. Data Sharing

We do not sell, trade, or share your personal data with third parties for marketing purposes. We share data only with service providers necessary to operate FXfolder:

• Razorpay: for payment processing
• Dodo Payments: for payment processing for members in India
• Stripe: for billing memberships that were purchased through it before we moved to Razorpay
• ForumPay: for crypto payments. ForumPay receives your email address (needed for crypto renewal reminders and refunds) and an internal member ID. ForumPay, not FXfolder, handles your wallet and on-chain payment data, under its own terms.
• Didit: for partner identity verification before payouts. Didit receives the ID document photo and selfie you submit to it and keeps them under its own terms; FXfolder keeps only the verification result and the details listed above.
• Cashfree: to check the PAN of partners who are tax residents of India against the Income Tax Department's records
• Telegram: for community delivery (your Telegram ID only)
• MongoDB Atlas: for secure data storage

4. Data Security

We implement industry-standard security measures including encrypted passwords (bcrypt), secure JWT authentication with token rotation, HTTPS encryption for all communications, and httpOnly cookies for session management.

5. Cookies

We use httpOnly cookies for authentication (refresh tokens). We do not use tracking cookies or third-party advertising cookies.

6. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and data
• Cancel your subscription at any time

To exercise these rights, contact us at support@fxfolder.com.

7. Deleting Your Account

Members can delete their account themselves at any time: in the FXfolder app under Me then Delete account, or on the website under Profile then Delete account. See Delete your FXfolder account for the steps, what is deleted and what is kept for accounting. If you cannot sign in, email us at support@fxfolder.com from the address on your account and we will delete it for you.

Partners (traders, mentors and affiliates) can delete their partner account themselves from the FXfolder Partner app or the partner portal. See Delete your FXfolder partner account.

8. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any material changes by posting the updated policy on this page with a revised date.

9. Contact

If you have questions about this privacy policy, contact us at support@fxfolder.com.