Privacy Policy & Data Protection

MCFX Terminal is operated by MCFX Technologies Inc. ("we", "us"), a corporation registered in Ontario, Canada, at mcfx.ca. MCFX Technologies Inc. is the controller of the personal data described in this policy.

This policy covers the website, the waitlist, and the Platform itself. It is written to meet Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and Quebec's Law 25, and applies the GDPR standard for users in the EEA and the UK. Where a local law gives you stronger rights than this policy describes, that law applies.

• →Account data: your name, email address and authentication credentials.
• →Subscription data: your plan, billing history and payment status. Card numbers are entered directly with our payment processor and are never stored by us.
• →Platform content: the trade ideas, journal entries, playbook notes, tags and annotations you create inside the Platform, including any figures you enter about your own positions or results.
• →Broker connection data: where you connect an automated execution component, the account identifier, server and connection settings required to route orders. Treat any credential you provide as sensitive and never share credentials that permit withdrawal of funds.
• →Usage data: log records, feature usage, session timestamps, IP address, browser and device type.
• →Communication data: emails, support requests and survey responses you send us.
• →Marketing data: email opens, clicks and unsubscribe actions.

• →Provide the service: authenticate you, run the desks, compute your scores, store your journal and playbook, and deliver what your plan includes.
• →Bill you: process subscription payments, handle renewals, refunds and failed payments.
• →Support you: answer your requests and investigate problems you report.
• →Improve the Platform: understand which features are used, diagnose bugs and prioritise work. We use aggregated and de-identified data for this wherever it is sufficient.
• →Secure the Platform: detect and prevent fraud, credential sharing, abuse and unauthorised access.
• →Communicate: send transactional notices, and marketing email only where you opted in.
• →Comply: keep records required by Canadian tax and corporate law.

We do not sell your personal data. We do not share your journal entries, trade ideas or performance figures with other users, and we do not publish them.

The Platform generates parts of its written output using large language models supplied by a third-party provider. To produce that text we send market data, computed scores and the context of the view you are looking at to that provider.

We do not send your name, email address, billing details or payment information for this purpose. Where a feature summarises content you wrote yourself, such as a journal entry, that content is sent only for that request and only when you invoke the feature.

Automated content generation is not automated decision-making about you. Nothing in the Platform uses AI to make a decision that has a legal or similarly significant effect on you, such as pricing, eligibility or account termination.

• →Contract: processing needed to give you the service you subscribed to.
• →Legitimate interests: securing the Platform, preventing abuse, and improving the product, balanced against your privacy.
• →Consent: marketing email and non-essential analytics. You can withdraw at any time.
• →Legal obligation: financial and tax records we are required to keep.

Under PIPEDA and Quebec Law 25 we rely on your consent, express or implied by your use of the service, for the purposes identified in this policy, and we do not use your data for a new purpose without telling you first.

We share personal data only with providers that process it on our behalf, under contract, for the purposes below:

• →Base44: application hosting and database.
• →Stripe: subscription payment processing.
• →MailerLite: email delivery and list management.
• →Anthropic: AI generation of written market briefs.

We may also disclose data where required by law, court order or a lawful request from a public authority, and to a successor entity in the event of a merger, acquisition or sale of assets, in which case this policy continues to apply until you are given notice of any change.

MCFX Technologies Inc. operates from Canada and serves users internationally, including across Latin America. Your data may be stored or processed in Canada, the United States or the European Union, depending on where our providers operate.

This means your data may be subject to the laws of those countries, including lawful access by their authorities. For transfers out of the EEA we rely on Standard Contractual Clauses. For Quebec residents, we assess each transfer for adequate protection before it is made, as Law 25 requires.

• →Account, usage and Platform content: deleted within 90 days of account closure.
• →Billing and tax records: retained 7 years, as Canadian law requires.
• →Broker connection settings: deleted immediately when you disconnect the integration.
• →Marketing data: retained until you unsubscribe.
• →Support correspondence: retained 3 years.
• →Aggregated, de-identified statistics that cannot be linked back to you may be kept indefinitely.

You may at any time ask us to:

• →Access: receive a copy of the personal data we hold about you.
• →Correction: have inaccurate or incomplete data corrected.
• →Deletion: have your data deleted, subject to records we are required to keep.
• →Portability: receive your data in a structured, commonly used, machine-readable format.
• →Objection: object to processing we carry out on the basis of legitimate interests.
• →Withdraw consent: withdraw consent to marketing at any time, without affecting the service you pay for.

Write to privacy@mcfx.ca. We acknowledge within 5 business days and give a substantive answer within 30 days. We may ask you to verify your identity before acting on a request. Exercising a right is free and will never cause us to degrade or withdraw your service.

• →Essential: authentication and session state. Required for the Platform to work, and cannot be disabled.
• →Preference: your language choice and interface settings, stored in your browser.
• →Analytics: aggregate usage measurement. Optional.
• →Email pixels: open and click tracking in marketing email. Turning images off in your mail client prevents this.

We do not run advertising cookies and we do not sell data to advertising networks.

We use encrypted transport (HTTPS/TLS), hashed credentials, role-based access controls, least-privilege access to production data, and periodic review of who can reach what.

No system is perfectly secure. You are responsible for keeping your own password secret, for not sharing your account, and for telling us promptly if you believe your account has been accessed by someone else.

If a confidentiality incident creates a real risk of serious injury to you, we will notify you and the applicable regulator without unreasonable delay, and keep a register of the incident, as PIPEDA and Quebec Law 25 require.

Our notice will describe what happened, what data was involved, what we have done, and what you should do.

The Platform is not directed at anyone under 18 and we do not knowingly collect data from minors. If you believe a minor has given us data, write to privacy@mcfx.ca and we will delete it.

We may update this policy. The effective date at the top of this page will change, and where a change materially affects how we use data you already gave us, we will notify subscribers by email before it takes effect.

MCFX Technologies Inc.
Ontario, Canada
Privacy: privacy@mcfx.ca
Legal: legal@mcfx.ca