MyFXMonitor Privacy Policy

Version: 1.0

Effective date: 03.11.2026

Website: https://myfxmonitor.com

1. General provisions

This Privacy Policy describes how the MyFXMonitor web service (the “Service”) collects, uses, stores, protects and deletes users’ personal data.

MyFXMonitor is designed to monitor trading accounts used with MetaTrader 4 (MT4) and MetaTrader 5 (MT5), display trading statistics, generate reports and send notifications.

The Service is not a broker, does not accept users’ funds for management and is not intended to execute trades independently.

Users can consult this Policy to learn how their data is processed when using the Service.

2. Data controller

Contact for personal data matters:

• Project name: MyFXMonitor.
• Contact: MyFXMonitor Administrator.
• Country of establishment: Republic of Belarus.
• Contact email: hitry2503@gmail.com.

MyFXMonitor is under development and is being prepared for public launch.

3. Data we process

Depending on the features used, the Service may process the following categories of data.

3.1. Account data

• Email address.
• Username or display name, if provided.
• Registration and email verification information.
• Argon2 password hashes used for authentication. Passwords are not stored in plain text.
• Data required to manage authenticated sessions, including token hashes and session creation, last activity, expiry and revocation times.

3.2. Connected trading account data

• Trading account number and broker or trading server name.
• Trading platform type (MT4/MT5).
• Balance, equity, profit, losses and drawdown metrics.
• Open positions and trading history.
• Data required to produce charts, statistics and reports.
• Connection status and last update time.
• Technical pairing codes and monitoring agent access keys; agent keys are stored encrypted. These are not trading terminal or brokerage account passwords.

This information is used to provide monitoring features. It may be confidential even when it does not, on its own, identify a person.

3.3. Notification and support data

• Telegram identifier and bot connection details, if the user activates this feature.
• Selected notification settings.
• The content of support requests and replies.
• Technical information about message delivery and read status, and support request status.
• Telegram chat identifier and language preferences, if the feature is connected.

3.4. Technical data

When the Service is used, it may process IP addresses, browser and device information, request times, technical logs and session data required to operate, protect and diagnose the Service.

4. Purposes of processing

Data is used to:

1. Create and maintain user accounts.
2. Authenticate users and protect access.
3. Connect and monitor trading accounts.
4. Display trading metrics, history and reports.
5. Send requested service notifications.
6. Verify email addresses and restore access.
7. Handle support requests.
8. Identify technical errors, prevent abuse and maintain security.
9. Comply with applicable legal obligations.

Personal data is not sold to advertisers or brokers.

5. Legal bases for processing

Data is processed on grounds provided for by applicable law, including, where necessary:

• the user’s consent;
• the need to provide Service features requested by the user;
• compliance with legal obligations;
• other lawful grounds applicable to the specific processing activity.

Where separate consent is required for a particular processing activity, it must be obtained appropriately.

6. Disclosure to third-party providers

Third-party technical providers may be used to operate the Service.

6.1. Hosting

Service data is hosted on server infrastructure used by the MyFXMonitor operator. Data may be processed and stored outside the user’s country of residence.

6.2. Mailjet

Mailjet is planned for transactional email delivery. As of the effective date of this Policy, email integration had not been connected and no emails were being sent through Mailjet.

The email provider may receive the recipient’s address, the subject and content of a service email, and technical information needed for delivery and diagnostics.

Such emails include registration confirmations, password reset instructions and other service messages.

6.3. Telegram

If a user connects the MyFXMonitor Telegram bot and delivery is enabled, the information required for notifications is transmitted through Telegram’s infrastructure. External delivery of support messages is still being prepared.

Telegram processes the content of messages under its own rules. Users should be aware that messages may contain information about their trading accounts.

6.4. Other recipients

Data may be disclosed to competent authorities in response to a valid legal requirement.

We seek to limit disclosures to the information necessary for the specific purpose.

7. Data protection

Technical and organisational measures appropriate to the nature of the information are used to protect data.

These measures may include secure connections, access controls, secure credential storage, authenticated session controls, logging of technical events and restricted access to server infrastructure.

No transmission or storage system can guarantee absolute security. If an incident is identified, measures are taken to limit its consequences and applicable notification obligations are fulfilled.

8. Retention periods

Data is retained for as long as needed to provide the Service, meet legal obligations and maintain security.

In particular:

• account data: while the account is active and, after closure, within the applicable deletion or mandatory retention periods;
• monitoring data and trading history: for the period specified by the Service’s current retention settings and rules;
• support requests: for as long as needed to handle them and resolve related matters;
• technical logs: for a limited period required for security and diagnostics;
• backups: until the applicable backup retention cycle is complete.

The current implementation supports aggregation of monitoring history; detailed points are deleted only when cleanup is explicitly enabled. This is not a general deletion policy for all data. Expiry of a token or session does not mean that its database record is automatically deleted. Uniform deletion periods for accounts, support requests and all technical logs, and a complete backup deletion cycle, have not yet been established.

9. Users’ rights

To the extent provided by applicable law, users may:

• receive information about the processing of their personal data;
• request access to their data;
• request correction of inaccurate data;
• request deletion where there is no lawful basis for continued retention;
• withdraw consent where processing is based on consent;
• exercise other rights provided by law, including challenging unlawful processing.

For personal data requests, contact the controller at the address given in section 2.

Verification of identity or account ownership may be required before a request is fulfilled.

10. Cookies and sessions

The Service uses technical cookies for authentication (tm_session), protection against forged requests (tm_csrf), temporary messages (tm_flash) and the trading account connection process. The tm_language and tm_theme cookies retain the selected language and theme; their configured lifetime is up to one year.

Browser localStorage retains identifiers of previously seen incoming messages to prevent repeated notification sounds. sessionStorage is used for interface state, including confirmation that a message was sent. These mechanisms are not advertising tracking. Users can clear site data through their browser; doing so may reset preferences and end their session.

If optional analytics or advertising technologies are introduced in the future, information about their use and any required consent settings will be provided separately.

11. Electronic messages

MyFXMonitor provides for service emails related to use of the Service, including email verification, access recovery and important events. As of the effective date of this Policy, actual email delivery had not yet been connected; the presence of forms and settings does not mean that such emails are already being sent.

Service emails are not advertising mailings.

Marketing messages, if introduced, will be subject to separate rules and any required consent.

12. International data transfers

As the Service may use foreign hosting, email and notification providers, data may be processed outside the Republic of Belarus.

Such transfers take place on an appropriate legal basis and in compliance with applicable personal data protection requirements.

13. Changes to this Policy

The controller may update this Policy when Service features, processing practices or applicable legal requirements change.

The current version is available at:

https://myfxmonitor.com/privacy

The effective date of a new version is stated at the beginning of the document.

14. Contact information

For matters relating to personal data processing, information requests, correction or deletion, contact:

MyFXMonitor

Email: hitry2503@gmail.com

Contact: MyFXMonitor Administrator