Privacy Policy

MindFN Ltd is a company registered in England and Wales (company number 17234620), with its registered office at 128 City Road, London, EC1V 2NX, United Kingdom. We are the data controller for your personal data under the UK GDPR and the Data Protection Act 2018, which means we decide how and why your personal data is processed. If you have any questions about this Privacy Policy or about how we handle your data, you can reach us at any time at privacy@mindfn.trade.

We collect the following categories of information:

• Account information: your full name, email address, phone number and country code, and a hashed password.
• Verification codes: one-time codes used to verify your email address and phone number.
• Payment details: subscriptions are billed through Stripe. MindFN never sees or stores your full card numbers.
• Technical and usage information: your IP address, device, browser, and session data.
• Product and preference data: your watchlists, per-symbol and per-timeframe alerts, and dashboard settings.

• Deliver the service and keep it secure, including providing real-time trading signals to your dashboard.
• Manage your account, including registration, authentication, and account settings.
• Process subscription billing through Stripe.
• Verify your phone number by SMS through Twilio.
• Send transactional email, such as account and security notices, through Amazon SES.
• Deliver alerts and, with your consent, optional web-push notifications.
• Improve the platform, including understanding which features are used and how.
• Meet legal and regulatory obligations, including tax and accounting requirements.

We process your personal data only where we have a legal basis under the UK GDPR:

• Performance of a contract: to provide the service you signed up for, including delivering signals and managing your subscription.
• Consent: for analytics cookies, optional web-push notifications, and marketing communications. You may withdraw your consent at any time.
• Legitimate interests: for security, fraud prevention, and improving our product.
• Legal obligation: for tax, accounting, and other legal requirements.

We use the following categories of cookies:

• Essential and session cookies: required for the platform to function, including keeping you signed in and maintaining your language preference.
• Preference cookies: remember your settings, such as layout and display choices.
• Analytics cookies: placed only with your consent, to help us understand how the platform is used.

You can manage cookies through your browser settings at any time.

We share personal data only with processors that help us run the service:

• Stripe - payment processing and subscription billing.
• Twilio - delivery of SMS verification codes.
• Amazon SES - transactional email delivery.
• Cloud hosting and object storage providers - infrastructure and uploaded assets.

We do not sell your personal data.

Some of our processors, such as Stripe, Twilio, and AWS, may process personal data outside the UK. Where this happens, we rely on appropriate safeguards, including UK adequacy regulations, the UK International Data Transfer Agreement, or Standard Contractual Clauses, to ensure your data continues to be protected to UK standards.

• Account data: kept while your account is active and for a limited period after closure, to allow recovery and to meet legal obligations.
• Billing and tax records: kept as long as legally required.
• Technical logs: kept for a limited period for security and troubleshooting purposes.

Under the UK GDPR and the Data Protection Act 2018, you have the following rights:

• Access - obtain a copy of the personal data we hold about you.
• Rectification - correct inaccurate or incomplete data.
• Erasure - request deletion of your data.
• Restriction - ask us to restrict processing.
• Objection - object to processing based on legitimate interests.
• Portability - receive your data in a structured, machine-readable format.
• Withdraw consent - where processing is based on your consent.
• Not be subject to solely automated decisions, including profiling.

To exercise any of these rights, contact us at privacy@mindfn.trade. We respond within one month. If you are not satisfied with our response, you may complain to the Information Commissioner's Office (ICO) at ico.org.uk.

We protect your personal data with appropriate technical and organisational measures:

• All data is encrypted in transit using TLS.
• Passwords are stored only as modern hashes, never in plain text.
• Access to personal data is limited on a need-to-know basis.
• We review our security measures regularly.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

The service is intended for adults aged 18 and over. We do not knowingly collect personal data from anyone under 18. If we learn that we have collected data from a person under 18, we will delete it. If you believe this has happened, contact us at privacy@mindfn.trade.

We may update this Privacy Policy from time to time. The date shown at the top of this page is the date of the latest revision. If we make material changes, we will notify users, for example by email or through an in-platform notice.

If you have any question about this Privacy Policy or about how we handle your personal data, contact us at privacy@mindfn.trade. You may also contact the Information Commissioner's Office (ICO) at ico.org.uk.