Privacy Policy
Last updated: June 2026 · Applies to all ForexPro platform users
1. Who We Are
ForexPro ("we", "us", "our") operates the online forex trading and education platform available at fxprorise.org. We are committed to protecting your personal data and your right to privacy. This Privacy Policy explains what information we collect, why we collect it, and how we handle it when you use our Platform.
2. Information We Collect
We collect the following categories of personal data: • Identity data: full name, date of birth, nationality, government-issued ID number • Contact data: email address, phone number, country of residence • Financial data: deposit and withdrawal records, account balances, transaction history • KYC documents: copies of government-issued ID, proof of address, and selfie photographs • Technical data: IP address, browser type, device information, login timestamps • Usage data: pages visited, features used, lesson progress, trading activity • Communications: support ticket messages, email correspondence
3. How We Use Your Information
We use your personal data for the following purposes: • Account creation and authentication • Processing deposits, withdrawals, and transactions • Identity verification (KYC/AML compliance) • Providing customer support • Sending transactional emails (deposit confirmations, password resets, KYC outcomes) • Monitoring for fraud, abuse, and suspicious activity • Improving the Platform through analytics • Complying with legal and regulatory obligations We will never sell your personal data to third parties. We do not use your data for unsolicited marketing without your explicit consent.
4. KYC and Identity Verification
As part of our Anti-Money Laundering (AML) obligations, we are required to verify the identity of all live account holders. KYC documents you submit (government ID, proof of address, selfie) are stored securely and used solely for identity verification purposes. KYC data is retained for a minimum of 5 years after account closure as required by applicable regulations. We may share KYC data with regulatory authorities if required by law.
5. Legal Basis for Processing
We process your personal data on the following legal bases: • Contract performance: processing necessary to provide you with the services you have requested • Legal obligation: where we are required to process data to comply with KYC, AML, and other regulatory requirements • Legitimate interests: fraud prevention, platform security, and service improvement • Consent: for any optional communications where you have given explicit consent
6. Data Sharing
We share your data only where necessary: • Payment processors (Stripe, Daraja/M-Pesa, Pesapal, and crypto payment partners) to process transactions • Cloud infrastructure providers (Vercel, Neon) for platform hosting and database storage • Identity verification services when conducting enhanced KYC checks • Regulatory and law enforcement authorities when legally required All third-party providers we use are required to handle your data securely and in accordance with applicable data protection laws including GDPR, CCPA, and regional equivalents.
7. Data Storage and Security
Your data is stored on secure cloud servers with encryption at rest and in transit. Passwords are hashed using bcrypt with a cost factor of 12 and are never stored in plain text. Access to personal data is restricted to authorised personnel only. We maintain audit logs of all administrative actions. Despite our security measures, no internet-based system is completely secure, and we cannot guarantee absolute security.
8. Data Retention
We retain your personal data for as long as your account is active and for a period thereafter as required by law. Specifically: • Account data: retained for 5 years after account closure • KYC documents: retained for 5 years after account closure (regulatory requirement) • Transaction records: retained for 7 years (financial record-keeping requirement) • Support communications: retained for 2 years You may request deletion of your account data at any time, subject to our retention obligations under applicable law.
9. Your Rights
Depending on your jurisdiction, you may have the following rights regarding your personal data: • Right of access: request a copy of the personal data we hold about you • Right to rectification: request correction of inaccurate data • Right to erasure: request deletion of your data (subject to legal retention requirements) • Right to restriction: request that we limit processing of your data • Right to data portability: receive your data in a structured, machine-readable format • Right to object: object to processing based on legitimate interests To exercise any of these rights, contact us at privacy@fxprorise.org. We will respond within 30 days.
10. Cookies
We use strictly necessary cookies to maintain your login session and ensure security. We do not use tracking or advertising cookies. Session cookies are deleted when you close your browser. Persistent authentication cookies remain for up to 7 days if you remain logged in. You can disable cookies in your browser settings, but this may prevent you from logging into the Platform.
11. Children's Privacy
The Platform is not directed to individuals under the age of 18. We do not knowingly collect personal data from minors. If we become aware that we have collected data from a person under 18, we will delete that data immediately. If you believe we have inadvertently collected data from a minor, please contact us at support@fxprorise.org.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by email or by displaying a prominent notice on the Platform. Your continued use of the Platform after changes become effective constitutes acceptance of the revised policy. The date at the top of this page indicates when the policy was last updated.
13. Contact Us
For privacy-related questions, requests, or complaints, contact our data team: Email: privacy@fxprorise.org General support: support@fxprorise.org Website: www.fxprorise.org We will respond to all privacy requests within 30 days in accordance with applicable data protection regulations.