Privacy Policy

FXSynapse AI is operated by K2026174513 (Pty) Ltd (Registration Number 2026/174513/07), a private company registered in the Republic of South Africa ("we", "us", "our"), trading as FXSynapse AI — our AI-powered chart analysis platform. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our services.

Registered office: A2048 Godfrey Street, Diepsloot West, Diepsloot, Gauteng 2189, South Africa.

For any privacy-related queries, contact our Information Officer at: support@fxsynapseai.com

Account Information:

• Email address (required for registration)
• Full name / display name (optional)
• Password (hashed, never stored in plain text)
• Profile preferences and settings

Usage Data:

• Chart images you upload for analysis (processed and stored temporarily)
• Scan history and AI analysis results
• Feature usage patterns (scans performed, pages visited)
• Device type, browser, and general location (country level)

Payment Information:

• Payment status and transaction references
• Plan and subscription details
• We do NOT store your card numbers, CVV, or full banking details — these are handled securely by our payment processors: Whop (subscriptions, our merchant of record) and NOWPayments (cryptocurrency)

Communication Data:

• In-app chat messages with support
• Email correspondence

Push Notification Data (when enabled):

• Browser push endpoint URL and encryption keys (p256dh, auth)
• Notification preferences
• Stored only when you enable push notifications; removed when you disable them or delete your account

We process your personal information for the following lawful purposes under POPIA:

Your data is stored securely using:

• Supabase — for user accounts, profiles, and application data (hosted on secure cloud infrastructure with row-level security)
• Vercel — for application hosting (SOC 2 Type II compliant)
• Brevo (Sendinblue) — for transactional and marketing emails
• Whop — merchant of record for all subscription plans; PCI DSS compliant card processing
• NOWPayments — cryptocurrency settlements (USDT, BTC, ETH and others)

All data is transmitted over HTTPS/TLS encryption. Passwords are hashed using industry-standard algorithms. We implement access controls to ensure only authorised personnel can access personal data.

While we take reasonable measures to protect your data, no system is 100% secure. We cannot guarantee absolute security of data transmitted over the internet.

We do NOT sell your personal information to third parties.

We may share limited data with:

• Payment processors (Whop, NOWPayments) — to process your subscription and crypto transactions; Whop is our merchant of record and the seller on invoice
• Email service providers (Brevo) — to send you transactional and marketing emails
• AI providers (Anthropic Claude) — chart images are sent for analysis processing. Anthropic does not retain submissions for model training per its API terms
• Law enforcement — if legally compelled by a valid South African court order

As a data subject under POPIA, you have the right to:

• Access — Request a copy of personal information we hold about you
• Correction — Request correction of inaccurate or incomplete personal information
• Deletion — Request deletion of your personal information. You can submit a request in two ways:
  1. From the dashboard sidebar (Profile menu → Delete Account)
  2. From our public deletion page at fxsynapseai.com/account/delete
  Requests are reviewed manually by our team to prevent accidental loss and processed within 30 days, after which your data is permanently removed (subject to the legal retention exceptions in Section 8).
• Object — Object to the processing of your personal information for direct marketing
• Withdraw consent — Withdraw consent for marketing communications at any time
• Lodge a complaint — File a complaint with the Information Regulator of South Africa

To exercise any of these rights, email us at support@fxsynapseai.com. We will respond within 30 days.

The Platform uses essential cookies for authentication and session management. We may use basic analytics to understand feature usage and improve the service.

We do not use invasive tracking, fingerprinting, or sell data to advertising networks.

We retain your data for as long as your account is active or as needed to provide the service. Specifically:

• Account data — retained until you request deletion
• Scan history — retained for the duration of your account
• Uploaded charts — processed and stored; may be deleted after analysis
• Payment records — retained for 5 years for tax and legal compliance
• Chat messages — retained for support quality purposes

Upon account deletion, we will remove your personal data within 30 days, except where retention is required by law. You can submit a deletion request at any time via the dashboard or fxsynapseai.com/account/delete. Requests are reviewed and completed within 30 days.

The Platform is not intended for users under 18 years of age. We do not knowingly collect personal information from minors. If we become aware that a minor has provided us with personal data, we will delete it promptly.

Your data may be processed on servers located outside South Africa (e.g. cloud infrastructure in the US or EU). Where data is transferred internationally, we ensure adequate safeguards are in place as required by POPIA Section 72.

We may update this Privacy Policy from time to time. Material changes will be communicated via email or an in-app notification. The "Effective" date at the top indicates the latest revision.

For privacy-related queries or to exercise your POPIA rights:

Email: support@fxsynapseai.com

To lodge a complaint with the Information Regulator:

The Information Regulator (South Africa)
JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001
complaints.IR@justice.gov.za