Privacy Policy

FXSynapse AI is operated by K2026174513 (Pty) Ltd, a company registered in the Republic of South Africa ("we", "us", "our"). FXSynapse AI is our AI-powered chart analysis platform. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our services.

For any privacy-related queries, contact our Information Officer at: fxsynapseai@gmail.com

Account Information:

• Email address (required for registration)
• Full name / display name (optional)
• Password (hashed, never stored in plain text)
• Profile preferences and settings

Usage Data:

• Chart images you upload for analysis (processed and stored temporarily)
• Scan history and AI analysis results
• Feature usage patterns (scans performed, pages visited)
• Device type, browser, and general location (country level)

Payment Information:

• Payment status and transaction references
• Plan and subscription details
• We do NOT store your card numbers, CVV, or full banking details — these are handled securely by our payment processor (Yoco)

Communication Data:

• In-app chat messages with support
• Email correspondence

We process your personal information for the following lawful purposes under POPIA:

Your data is stored securely using:

• Supabase — for user accounts, profiles, and application data (hosted on secure cloud infrastructure with row-level security)
• Vercel — for application hosting (SOC 2 Type II compliant)
• Brevo (Sendinblue) — for transactional and marketing emails
• Yoco — for payment processing (PCI DSS compliant)

All data is transmitted over HTTPS/TLS encryption. Passwords are hashed using industry-standard algorithms. We implement access controls to ensure only authorised personnel can access personal data.

While we take reasonable measures to protect your data, no system is 100% secure. We cannot guarantee absolute security of data transmitted over the internet.

We do NOT sell your personal information to third parties.

We may share limited data with:

• Payment processors (Yoco) — to process your transactions
• Email service providers (Brevo) — to send you transactional and marketing emails
• AI providers (OpenAI / Anthropic) — chart images are sent for analysis processing. These providers process data per their own privacy policies and do not retain your data for training
• Law enforcement — if legally compelled by a valid South African court order

As a data subject under POPIA, you have the right to:

• Access — Request a copy of personal information we hold about you
• Correction — Request correction of inaccurate or incomplete personal information
• Deletion — Request deletion of your personal information (subject to legal retention requirements)
• Object — Object to the processing of your personal information for direct marketing
• Withdraw consent — Withdraw consent for marketing communications at any time
• Lodge a complaint — File a complaint with the Information Regulator of South Africa

To exercise any of these rights, email us at fxsynapseai@gmail.com. We will respond within 30 days.

The Platform uses essential cookies for authentication and session management. We may use basic analytics to understand feature usage and improve the service.

We do not use invasive tracking, fingerprinting, or sell data to advertising networks.

We retain your data for as long as your account is active or as needed to provide the service. Specifically:

• Account data — retained until you request deletion
• Scan history — retained for the duration of your account
• Uploaded charts — processed and stored; may be deleted after analysis
• Payment records — retained for 5 years for tax and legal compliance
• Chat messages — retained for support quality purposes

Upon account deletion, we will remove your personal data within 30 days, except where retention is required by law.

The Platform is not intended for users under 18 years of age. We do not knowingly collect personal information from minors. If we become aware that a minor has provided us with personal data, we will delete it promptly.

Your data may be processed on servers located outside South Africa (e.g. cloud infrastructure in the US or EU). Where data is transferred internationally, we ensure adequate safeguards are in place as required by POPIA Section 72.

We may update this Privacy Policy from time to time. Material changes will be communicated via email or an in-app notification. The "Effective" date at the top indicates the latest revision.

For privacy-related queries or to exercise your POPIA rights:

Email: fxsynapseai@gmail.com

To lodge a complaint with the Information Regulator:

The Information Regulator (South Africa)
JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001
complaints.IR@justice.gov.za