Privacy Policy

MXWLL Capital (“MXWLL,” “Company,” “we,” “us,” or “our”) is committed to protecting and respecting your privacy. This Privacy Policy describes how we collect, use, disclose, and safeguard your personal information when you access our website, trading intelligence dashboard, and related services (collectively, the “Services”).

MXWLL Capital operates a multi-asset trading intelligence platform providing market bias summaries, trading signals, news intelligence, technical indicators, educational masterclasses, and coaching sessions. By using our Services, you consent to the collection and use of information in accordance with this policy.

1. Information We Collect

We collect various categories of personal information to provide our platform and services:

1.1 Information You Provide Directly

• Account Information: Name, email address, and password when you create an account.
• Profile Information: Any additional details you choose to add to your profile, such as display name or avatar.
• Payment Information: When you subscribe to a paid plan, payment details are processed securely through Stripe. We do not store your full credit card number on our servers.
• Communications: Messages you send us through support channels, coaching session bookings, or feedback forms.

1.2 Information Collected Automatically

• Device and Technical Data: IP address, browser type and version, operating system, device identifiers, and screen resolution.
• Usage Data: Pages visited, features used, signals viewed, watchlist activity, dashboard interactions, and time spent on the platform.
• Security Data: Login timestamps, authentication events, session information, and security-related activities.

1.3 Information from Third Parties

• Payment Processor: Stripe provides us with transaction confirmation, subscription status, and billing details (but not full card numbers).
• Authentication Providers: If you sign in using a third-party provider (e.g., Google), we receive basic profile information from that provider.

2. How We Use Your Information

We process your personal information for the following purposes:

2.1 Platform Services

• Providing access to trading signals, market bias summaries, news intelligence, and indicator tools
• Managing your account, subscription plan, and feature access
• Processing payments and managing billing through Stripe
• Delivering coaching sessions and masterclass content
• Maintaining and personalising your watchlists and alerts

2.2 Communications

• Sending transactional emails about your account and subscription
• Delivering platform updates, new feature announcements, and service notifications
• Responding to support inquiries and feedback
• Sending marketing communications (only with your consent, and you can opt out at any time)

2.3 Security and Fraud Prevention

• Authenticating user access and enforcing two-factor authentication where enabled
• Detecting and preventing unauthorised access, abuse, or fraudulent activity
• Maintaining audit logs for security purposes

2.4 Platform Improvement

• Analysing usage patterns to improve features and user experience
• Diagnosing technical issues and improving platform performance

3. Legal Basis for Processing

We process your personal information based on the following legal grounds:

• Contractual Necessity: Processing necessary to provide you with the Services you have subscribed to.
• Legitimate Interests: Processing necessary for platform security, fraud prevention, and service improvement, provided these interests do not override your rights.
• Consent: Where required, processing based on your explicit consent (e.g., marketing emails), which you may withdraw at any time.
• Legal Obligations: Processing required to comply with applicable laws and regulations.

4. Information Sharing and Disclosure

We may share your personal information with the following categories of recipients:

• Payment Processor: Stripe processes your subscription payments. Their use of your data is governed by their own privacy policy.
• Hosting and Infrastructure: Vercel (hosting), Supabase (database and authentication), and Cloudflare (CDN and security) process data on our behalf.
• Analytics Providers: We may use analytics services to understand platform usage in aggregate.
• Legal Requirements: We may disclose information when required by law, court order, or governmental authority.

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

5. International Data Transfers

Your personal information may be transferred to and processed in countries outside your country of residence, including the United States (where our infrastructure providers operate). When we transfer personal information internationally, we implement appropriate safeguards including standard contractual clauses and data processing agreements.

6. Data Retention

We retain your personal information for as long as necessary to provide the Services and fulfil the purposes described in this policy:

• Active Accounts: Throughout the duration of your account and for a reasonable period after closure.
• Payment Records: As required by applicable tax and financial regulations, typically 7 years.
• Security Logs: Retained for up to 12 months for security and abuse prevention purposes.
• Deleted Accounts: After account deletion, we remove personal data within 30 days, except where retention is required by law.

7. Data Security

We implement technical and organisational measures to protect your personal information:

• Encryption of data in transit (TLS) and at rest
• Two-factor authentication support for account access
• Row-level security policies on our database
• Access controls limiting data access to authorised personnel
• Regular security reviews of our infrastructure

8. Your Rights

Subject to applicable law, you have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request correction of inaccurate or incomplete personal information.
• Deletion: Request deletion of your personal information and account.
• Portability: Receive your personal information in a structured, machine-readable format.
• Objection: Object to processing based on legitimate interests.
• Withdraw Consent: Where processing is based on consent, withdraw that consent at any time.

To exercise your rights, please contact us at the email address below.

9. Cookies and Tracking Technologies

Our website uses cookies and similar technologies:

• Essential Cookies: Required for authentication, security, and session management.
• Analytics Cookies: Help us understand how visitors interact with our platform to improve the experience.
• Preference Cookies: Remember your settings, such as theme and dashboard layout.

You can manage cookie preferences through your browser settings. Disabling essential cookies may affect platform functionality.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website and, for registered users, via email. Your continued use of the Services after any changes constitutes acceptance of the updated policy.

11. Contact Information

For questions about this Privacy Policy, to exercise your data rights, or for any privacy-related concerns, please contact us: