Privacy Policy

1. Scope

This policy explains what personal data [[LEGAL_ENTITY]] ("we", "us") collects when you use ForecastCity, why we collect it, who we share it with, and what you can do about it. It covers the website, the Web App, our MetaTrader tools, our emails, and our support channels.

2. What we collect

You give us:

• Account details: name, email address, password (stored hashed, never in plain text), country, timezone, preferred language.
• Profile details you choose to add: photo, biography, social links, education, experience.
• Payment details you enter with our payment providers. Card numbers and crypto wallet credentials are handled by the provider and never reach our servers.
• Content you create: chart drawings, workspaces, watchlists, alerts, journal entries, support messages, and anything you type into AI features.
• Partner Program details if you apply: payout method, payout account identifier, tax information where we are required to collect it.

We collect automatically:

• Usage data: pages and features used, session times, actions taken in the app, and general activity counts.
• Device and connection data: IP address, browser type and version, operating system, screen size, and language.
• Cookies and local storage, described in section 7.
• Email engagement: whether a message we sent was delivered, opened, or clicked.
• Referral attribution: when you arrive through a partner link, we store a hashed visitor identifier, the referral code, and the time, so a commission can be attributed correctly.

We receive from others:

• Market data and prices from data providers. This is not personal data about you.
• Payment status and subscription events from payment processors.
• Sign-in confirmation from a social or single sign-on provider if you use one.

3. Why we use it, and on what basis

• Creating and running your account, and delivering the features you pay for. Basis: performance of our contract with you.
• Taking payment, and handling renewals, refunds, and chargebacks. Basis: performance of our contract, and legal obligation.
• Keeping the Service secure, detecting fraud and abuse, and enforcing our terms. Basis: our legitimate interest in protecting the Service.
• Support, and telling you about outages or changes that affect you. Basis: performance of our contract.
• Improving features, measuring what is used, and fixing what is broken. Basis: our legitimate interest in improving the Service.
• Marketing email about new features and offers. Basis: your consent, which you can withdraw at any time.
• Meeting accounting, tax, and other legal obligations. Basis: legal obligation.

We do not sell your personal data, and we do not use your trading activity or your content to train third-party AI models.

4. AI features

When you use the AI Coach, the Knowledge Base assistant, or another AI feature, the text of your request and the context we attach to it are sent to a model provider so a response can be generated. We send the minimum needed to answer the question. Do not paste passwords, API keys, or other people's personal data into these features.

5. Who we share it with

We share personal data only with service providers who need it to make the Service work, and only for that purpose:

• Payment processors, for taking and reconciling payments.
• Email and messaging providers, for transactional and marketing email.
• AI model providers, for the features described in section 4.
• Cloud hosting, storage, and content delivery providers.
• Analytics and error-monitoring tools we operate.

We may also disclose data where the law requires it, to enforce our terms, to protect our rights or someone's safety, or as part of a merger or acquisition, in which case we will tell you beforehand.

6. Where your data lives

Our infrastructure and our providers may be located outside your country. Where data moves across borders we rely on the transfer mechanisms available to us, such as standard contractual clauses or an adequacy decision, and we require our providers to protect the data to the standard described here.

7. Cookies and similar technology

We use cookies and browser local storage for:

• Essential: signing you in, keeping your session, remembering security state. These cannot be switched off without breaking the Service.
• Preferences: your theme, layout, watchlists, chart settings, and language.
• Analytics: understanding which features are used, in aggregate.
• Referral attribution: remembering that you arrived through a partner link, for the attribution window shown in the Partner Program terms.

You can clear or block cookies in your browser. Blocking essential cookies will stop you from signing in.

8. How long we keep it

• Account data: while your account is open, and for a period after closure so we can meet legal and accounting obligations.
• Payment and invoice records: for the period required by tax and accounting law.
• Support conversations: normally up to three years.
• Usage and security logs: normally up to twelve months.
• Marketing consent records: while the consent stands, and for a period afterwards to prove it was given.

When a retention period ends we delete the data or irreversibly anonymise it.

9. Your rights

Depending on where you live, you may have the right to:

• Get a copy of the personal data we hold about you.
• Correct data that is wrong or incomplete.
• Delete your data, subject to our legal obligation to keep some records.
• Restrict or object to certain processing, including profiling for marketing.
• Receive your data in a portable, machine-readable format.
• Withdraw consent at any time, without affecting processing already carried out.
• Complain to your local data protection authority.

To exercise any of these, contact [[CONTACT_EMAIL]]. We will respond within the time the law allows, normally one month.

10. Security

We protect your data with encryption in transit, hashed passwords, encrypted storage of sensitive credentials, access control on our internal tools, and edge-level protection on our admin surfaces. No system is perfectly secure. If a breach occurs that puts your rights at risk, we will notify you and the relevant authority as the law requires.

11. Children

The Service is not for anyone under 18. We do not knowingly collect data from children. If you believe a child has given us data, contact us and we will delete it.

12. Marketing

You can opt out of marketing email at any time using the unsubscribe link in any message, or from your account settings. You cannot opt out of transactional email, such as password resets, payment receipts, and security notices, while your account is open.

13. Changes

We may update this policy. The effective date at the top of the document tells you when the current version took effect. Material changes will be announced in the app or by email.

14. Contact

Privacy questions and requests: [[CONTACT_EMAIL]]