Privacy Policy

This Privacy Policy describes how Xpresspro Fx ("Xpresspro Fx", "we", "us", "our") handles personal information in connection with the platform accessible at xpressprofx.com and its related services (collectively, the "Platform"). This policy applies to all users of the Platform, including prospective users, account holders, and individuals who contact us.

We collect and process personal information only where we have a lawful basis to do so, and we limit what we collect to what is necessary to operate the Platform, secure your account, and comply with our legal obligations.

We collect information you provide directly, information we collect automatically when you use the Platform, and information we receive from service providers.

Account and registration information. When you create an account, we collect your name, email address, and password (stored as a secure hash). We do not sell your personal information.

Identity verification (KYC) documents. To enable withdrawals, we collect government-issued identity documents and selfie images through our identity verification flow. These documents are uploaded to and stored securely with our third-party document-handling provider, Cloudinary, and are reviewed by our team before your verification is approved.

Transaction data. We collect records of deposits, withdrawals, buy/sell/trade activity, stock and share purchases, signal subscriptions, copy-trade positions, referral activity, and balance movements within your in-app wallet. This data is necessary to operate the Platform and maintain an accurate ledger.

Session and device data. We collect login sessions, device and browser information, IP addresses, and related activity so we can keep your account secure and detect unauthorized access.

Communication data. If you contact support or use our support channels, we may collect the content of your messages, tickets, and related correspondence.

We use the information we collect to:

• Create and maintain your account, and authenticate you when you sign in;
• Process deposits, withdrawals, trades, purchases, and other transactions, and maintain your in-app wallet and transaction history;
• Perform identity verification and meet anti-money-laundering and other legal obligations;
• Operate, secure, and improve the Platform, including preventing fraud and abuse;
• Provide customer support and respond to your inquiries;
• Send transactional and service communications (for example, deposit confirmations, withdrawal notifications, and trade settlement updates);
• Comply with legal requirements and exercise or defend our legal rights.

We do not use your information for advertising or to build profiles for unrelated purposes. Where we rely on consent, you may withdraw it at any time, subject to other legal bases continuing to apply.

We do not sell, rent, or trade your personal information. We share information only as described below and only to the extent necessary:

• Service providers. We engage trusted third parties who process information on our behalf, under our instructions, to run the Platform — for example, Cloudinary (secure storage of KYC documents) and our email provider for transactional notifications.
• Legal and regulatory compliance. We may disclose information where required by law, regulation, legal process, or government request, or where we reasonably believe disclosure is necessary to protect the Platform, our rights, or the safety of users.
• Business transfers. If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction, subject to appropriate confidentiality protections.

We retain personal information only for as long as necessary to fulfill the purposes described in this policy, and in accordance with applicable law.

• Account data is retained while your account is active, and for a reasonable period after you close it, to resolve disputes, prevent fraud, and comply with legal obligations.
• KYC documents are retained for as long as required by applicable law and our anti-money-laundering obligations, and for a reasonable period thereafter. You may request their deletion, subject to legal retention requirements.
• Transaction data is retained for accounting, tax, and regulatory purposes for the period required by applicable law, and for a reasonable period thereafter to support dispute resolution.
• Session and log data is retained for a limited period for security and operational purposes.

When information is no longer needed, we securely delete or anonymize it so it can no longer be associated with you.

We take reasonable technical and organizational measures to protect your information, including encryption in transit, hashed storage of passwords, access controls, and audit logging of balance-affecting and administrative actions. KYC documents are stored with our service provider using restricted access and are handled only by personnel who need them to perform identity verification.

No method of transmission or storage is completely secure. You also play an important role in protecting your account by keeping your password and 2FA codes confidential and notifying us immediately of any suspected unauthorized access.

Depending on your jurisdiction, you may have rights in relation to your personal information, including the rights to:

• Access a copy of the information we hold about you;
• Correct inaccurate or incomplete information;
• Request deletion of your information, subject to legal retention requirements;
• Restrict or object to certain processing;
• Receive a portable copy of information you have provided, where technically feasible;
• Withdraw consent where processing is based on consent; and
• Lodge a complaint with the relevant data-protection authority in your jurisdiction.

To exercise any of these rights, contact us using the details in Section 10. We may need to verify your identity before acting on your request, and we will respond within the timeframes required by applicable law.

The Platform uses cookies and local storage to keep you signed in, remember preferences, and support secure session management. We do not use cookies for behavioral advertising. You can control cookies through your browser settings, but disabling them may affect the functionality of the Platform.

The Platform is not directed at, and we do not knowingly collect personal information from, children under 18 (or the applicable age of majority). If you believe a child has provided us with personal information, please contact us and we will take steps to remove it.

If you have questions about this Privacy Policy or how we handle your personal information, please contact us through the support channel in your dashboard or by email at support@xpressprofx.com.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will notify you of material changes by reasonable means, including by posting the updated policy on the Platform or by email. The "Last updated" date at the top of this page will be revised accordingly. Your continued use of the Platform after changes take effect constitutes acceptance of the revised policy.