Effective date: 20.06.2026
1. Introduction
FXer ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our trading journal and analytics platform at fxer.net (the "Platform").
This policy applies to all users of the Platform, including visitors, registered users, and subscribers. By using the Platform, you acknowledge the practices described in this policy.
2. Who we are
FXer is a trade tracking and analytics platform operated from Estonia, European Union. For questions about this policy or your data, contact us.
3. Data we collect
We collect only the data necessary to provide, maintain, and improve the Platform. Below is a complete breakdown:
Account data
- Email address — required for registration and account communication
- Display name — the name you choose to show on your profile
- OAuth identifiers — if you sign in via Google or cTrader, we receive a unique identifier but never your password
Trading data
- Trade history — open/close prices, volumes, timestamps, symbols, and profit/loss imported from your connected MT4, MT5, or cTrader accounts
- Account metrics — balance, equity, drawdown, and platform-reported statistics
- Open positions — if your connected platform reports them (read-only, informational only)
Usage data
- Server logs — IP address, browser type, pages visited, timestamps (standard web server logging, retained up to 30 days)
- Analytics — anonymised page views and feature usage to improve the Platform (no personally identifiable trading data)
- Cookies — small text files for session management, preferences, and analytics (see Section 13)
4. How we use your data
Every use of your data is tied to a specific purpose. We do not repurpose data without notice:
- To provide the Platform — importing trades, computing analytics, generating insights, displaying dashboards, and enabling features you activate
- To improve the Platform — analysing anonymised usage patterns to fix bugs, optimise performance, and prioritise features
- To communicate with you — account notifications, service updates, billing receipts, and support responses
- To process payments — subscription billing via Stripe (we never store full credit card numbers)
- To comply with legal obligations — responding to lawful requests, enforcing our Terms, and protecting rights and safety
5. Legal basis for processing (GDPR)
Under the EU General Data Protection Regulation, we process your data on these legal grounds:
- Contractual necessity — providing the Platform you signed up for (account management, trade import, analytics delivery)
- Consent — cookies (except essential ones), marketing communications (you can withdraw at any time)
- Legitimate interest — anonymised analytics for Platform improvement, fraud prevention, and security monitoring
6. AI data processing
FXer uses AI language models to generate insights and observations about your trading data. All AI processing follows strict rules:
- Observational only — AI generates observations from your data ("your win rate drops 18% on Mondays"). It does not predict, recommend trades, or provide financial advice
- No training on your data — your trading data and personal information are never used to train, fine-tune, or improve external AI models
- No automated decisions — AI insights are informational only. FXer never makes automated decisions that produce legal effects or significantly affect you
You can see all AI-generated content in your account. AI never accesses data from accounts you have not explicitly selected in the AI chat interface.
7. Data sharing & third parties
We share data only with the service providers necessary to operate the Platform. All providers are vetted for GDPR compliance:
- Stripe — payment processing (receives payment method and transaction data; we never see full card numbers)
- Hosting providers — server infrastructure in the European Economic Area
- Analytics providers — anonymised, aggregated usage statistics (no trading data)
- Legal authorities — only when required by law, court order, or governmental regulation
We never sell, rent, or trade your personal data or trading history to third parties. Ever.
8. International data transfers
FXer is hosted in the European Economic Area. Your data is stored and processed on servers located within the EEA.
If we ever transfer data outside the EEA, we ensure adequate safeguards are in place — such as Standard Contractual Clauses (SCCs) or transfers to countries with an EU adequacy decision.
9. Data retention
We retain your data only as long as necessary for the purposes described in this policy:
- Account data — retained while your account is active. If you close your account, personal data is deleted within 30 days
- Trading data — retained while your account is active. Upon account closure, trading data is anonymised or deleted unless you request earlier deletion
- You may request deletion of specific data at any time by contacting us. Legal obligations (tax records, dispute resolution) may require us to retain certain data for longer periods.
10. Data ownership & portability
You own your trading data. FXer provides export tools so you can download your trade history in standard formats (CSV, XLS) at any time. You may also request a full data export including all personal data we hold about you, which we will provide within 30 days in a structured, machine-readable format as required by GDPR Article 20.
11. Data security
We implement technical and organisational measures to protect your data against unauthorised access, alteration, disclosure, or destruction:
- Encryption in transit — all connections use TLS 1.3 (HTTPS)
- Encryption at rest — sensitive data is encrypted at the database and file-system level
- Access controls and monitoring — access to production data is restricted, logged, and regularly reviewed
12. Your rights under GDPR
As an EU resident, you have the following rights regarding your personal data:
- Right of access — request a copy of the personal data we hold about you
- Right to rectification — correct inaccurate or incomplete data
- Right to erasure — request deletion of your data ("right to be forgotten")
- Right to restriction — limit how we process your data under certain conditions
- Right to data portability — receive your data in a structured, machine-readable format
- Right to object — object to processing based on legitimate interest
- Right to withdraw consent — withdraw previously given consent at any time
To exercise any of these rights, contact us. We will respond within 30 days. You also have the right to lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) or your local supervisory authority.
13. Cookies
We use cookies to make the Platform functional and improve your experience. You control non-essential cookies:
- Essential cookies — session management, authentication, and security. Required for the Platform to function. Cannot be disabled
- Analytics cookies — anonymised usage measurement to understand how the Platform is used and where to improve
- Preference cookies — remember your theme (light/dark), language, and display settings
You can accept or reject non-essential cookies via the cookie banner on your first visit. You can change your preferences at any time through your browser settings or by clearing cookies and revisiting the Platform.
14. Children's privacy
The Platform is not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us immediately and we will delete it.
15. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be communicated via email and/or a notice on the Platform at least 14 days before taking effect. Continued use of the Platform after changes take effect constitutes acceptance of the updated policy.
16. Contact us
For privacy-related questions, data requests, or to exercise your rights, contact us at:
Email: info@fxer.net