Privacy Policy - ATLAS FX

1. Data Controller

ATLAS FX is the data controller responsible for your personal data. We are committed to protecting your privacy and processing your data in accordance with the General Data Protection Regulation (GDPR) and applicable data protection laws.

2. Data We Collect

We collect the following personal data: account information (name, email address, password hash), billing information (processed and stored by Stripe — we do not store credit card numbers), usage data (API request logs, login history, IP addresses), and technical data (browser type, device information, operating system). We collect this data when you register, subscribe, use our API, or contact support.

3. Purpose of Processing

We process your personal data for the following purposes: to provide and maintain the Service, to process payments and manage subscriptions, to send service-related communications (signal alerts, account updates), to monitor and prevent abuse of the Service, to comply with legal obligations, and to improve the Service through aggregated analytics.

4. Legal Basis for Processing

We process your data based on: contractual necessity (to provide the Service you subscribed to), legitimate interest (to prevent fraud and improve the Service), consent (for optional marketing communications, which you can withdraw at any time), and legal obligation (tax and financial reporting requirements).

5. Data Retention

We retain your account data for the duration of your active subscription plus 12 months after cancellation. API logs are retained for 90 days. Billing records are retained for 7 years as required by tax law. You may request deletion of your data at any time, subject to our legal retention obligations.

6. Your Rights (GDPR)

Under GDPR, you have the right to: access your personal data, rectify inaccurate data, erase your data ("right to be forgotten"), restrict processing, data portability, object to processing, and withdraw consent. To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

7. Third-Party Services

We share data with the following third parties: Stripe (payment processing), email service providers (transactional emails), and hosting providers (server infrastructure). All third parties are bound by data processing agreements and comply with GDPR requirements. We do not sell your personal data to any third party.

8. Contact

For privacy-related inquiries or to exercise your data rights, contact our Data Protection Officer at [email protected].