Privacy Policy

FXNewsBias respects your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data.

By using FXNewsBias, you agree to this Privacy Policy.

1. Information We Collect

Information you provide directly:

• Email address (when you register, subscribe to the newsletter, or contact us)
• Display name and password (managed via Firebase Authentication; passwords are never stored on our servers in plain text)
• Profile information (country, trading experience — all optional)
• Telegram chat ID (only if you opt in to Telegram alerts)
• Payment details (collected and stored by Stripe — we never see or store your full card number)
• Community posts and comments you publish
• Messages you send through contact forms

Information collected automatically:

• IP address and approximate location (city / country level)
• Device type, browser, operating system, screen size
• Pages visited, time spent, click and scroll patterns
• Referring website (how you found us)
• Date and time of visits
• Subscription tier (Free / Pro) for feature gating

2. How We Use Your Information

• Provide our service — display the sentiment dashboard, Market Pulse, Divergence detector, Streaks, news feed, calendar, and community.
• Account management — login, password reset, subscription status, profile features.
• Send alerts — deliver email digests and Telegram notifications you opt in to.
• Process payments — handle Pro subscription billing through Stripe.
• Communication — respond to inquiries, send service-related and (if subscribed) marketing emails.
• Improve the platform — analyze aggregated usage to refine features.
• Display ads — show relevant advertisements on the free tier (Google AdSense and partner ad networks).
• Security — detect fraud, abuse, automated scraping, and unauthorized access.
• Legal compliance — comply with applicable laws and respond to lawful requests.

3. Cookies & Local Storage

We use a small number of cookies and browser localStorage entries:

• Essential — fxnb_logged_in (login state flag), cookie-consent decision, and Firebase Authentication session tokens. Required for the site to function.
• Analytics — Google Analytics 4 (_ga, _ga_*) to measure aggregated traffic.
• Advertising — Google AdSense sets cookies to serve relevant ads on the free tier. Disabled for Pro subscribers.
• Preference — UI choices (e.g. tab selection, dismissed banners) stored in localStorage on your device only.

You can decline non-essential cookies via the consent banner shown on your first visit, and you can clear cookies at any time through your browser settings. Declining analytics/advertising cookies does not affect the core dashboard functionality.

4. Third-Party Services

We use a small set of vendors to operate FXNewsBias. Each receives only the data needed for their specific role:

• Cloudflare Pages & Workers — static hosting, CDN, DDoS protection, and the scheduled jobs that refresh sentiment, prices, and news.
• Firebase Authentication (Google) — secure email/password and social login; receives your email and a hashed password.
• Supabase — Postgres database that stores sentiment scores, prices, news headlines, community posts, and your profile/subscription metadata.
• Anthropic Claude — AI engine that scores news sentiment. Public news headlines (no personal data) are sent for analysis.
• TwelveData — provides live and historical forex price quotes.
• Stripe — processes Pro subscription payments. Card data is collected on Stripe's servers; we receive only a customer ID and subscription status.
• Resend — sends transactional emails (verification, password reset, Daily Brief, alerts). Receives your email address and message contents.
• Telegram Bot API — delivers Telegram alerts to users who opt in. Receives your Telegram chat ID and the alert message.
• Google Analytics 4 — anonymized traffic and behaviour analytics.
• Google AdSense / Google Ad Manager and partner ad networks — display advertising on the free tier (disabled for Pro subscribers).
• Google Favicon Service (s2/favicons) — when news cards render, your browser fetches each publisher's favicon from google.com/s2/favicons. This is a passive request to Google and may be logged by Google per their own privacy policy.
• Investing.com Calendar widget — embedded as an iframe on the calendar page; subject to Investing.com's own cookie and tracking policies.

5. Data Sharing

• With service providers — companies that help us operate
• For legal reasons — when required by law or court order
• To protect rights — to prevent fraud or abuse
• With your consent — if you specifically authorize sharing

We will never sell your personal data to advertisers or data brokers.

6. Data Security

• HTTPS / TLS encryption for all data transmission.
• Passwords are hashed and managed by Firebase Authentication — we never see them in plain text.
• Payment details are tokenised by Stripe and never stored on our servers.
• Database access (Supabase) is restricted by row-level security and service-role keys held only by the backend worker.
• Cloudflare DDoS protection, WAF, and bot mitigation in front of the entire platform.
• Limited internal access to personal data on a need-to-know basis.
• Regular dependency and security reviews.

No system is 100% secure. In the event of a data breach affecting your personal information, we will notify affected users and the relevant authorities as required by applicable law.

6.1 Data Retention

• Account data — kept for as long as your account is active. Deleted within 30 days of account closure (some records may be retained longer for legal, tax, or fraud-prevention reasons).
• Sentiment, price, and news data — public market data, retained indefinitely for historical charts.
• Payment records — retained by Stripe and by us for at least 7 years to meet financial record-keeping obligations.
• Analytics — Google Analytics retains aggregated data for up to 14 months by default.
• Email logs — Resend retains delivery metadata for up to 90 days.

7. Your Rights

• Access — request a copy of your personal data
• Correction — fix inaccurate data
• Deletion — request removal of your data
• Portability — receive your data in portable format
• Withdraw consent — for processing based on consent

Contact us through our contact page to exercise these rights.

8. Children's Privacy

FXNewsBias is not intended for users under 18 years old. We do not knowingly collect data from children.

9. Policy Changes

We may update this Privacy Policy from time to time. We'll update the "Last updated" date and notify registered users via email for significant changes.

10. Contact Us

If you have questions about this Privacy Policy, contact us through our contact page.