Privacy Policy

1. Who we are

ForSenFX ("we", "us") operates this website and the ForSenFX News EA service. We are the controller of the personal data described in this policy. Contact: support@forsenfx.com.

2. What we collect and why

Purchases: your email address, order and subscription records, and billing status. Legal basis: performance of a contract. Payment card details are collected and processed by Stripe, our payment processor — we never see or store your card number. Stripe shares limited card metadata with us (for example the card brand, last four digits, and a card fingerprint), which we use to enforce the one-trial-per-customer limit and to prevent payment fraud. Legal basis: legitimate interests in preventing abuse.

Access keys: your API key is stored only as a cryptographic hash together with a masked preview. The full key is encrypted while your welcome email is being delivered and is erased once it has been sent.

Account management: when you request a management link we email you a one-time sign-in link and set an essential session cookie (forsen_manage_session) when you use it. Legal basis: performance of a contract.

Support: if you email us or use the live chat, we receive the information you send. The chat widget (Crisp) loads only after you accept it — no chat cookies are set before then. Legal basis: legitimate interests in providing support.

Emails: we send transactional emails (access keys, billing status, refunds, and support form messages) through Resend because they are necessary to provide the service. If you separately opt in after checkout, on the management page, or in the footer, we may also send occasional product updates and offers. Marketing consent is optional, is recorded with its source, timestamp, and whether the email belongs to a customer or an interested lead, and can be withdrawn at any time without affecting your access.

3. Cookies

We use only essential cookies: a management session cookie when you sign in to your management page, and an admin session cookie for site administration. The Crisp chat widget sets its own cookies only after you choose to open the chat and accept it. We do not use advertising or analytics cookies.

4. Who we share data with

We share data with service providers who process it for us: Stripe (payments and billing), Resend (transactional email), Crisp (support chat, only if you accept it), Supabase (secure file storage for software downloads), and our hosting and database providers. Each processes your data under its own data-processing terms. Some providers process data outside the UK; where they do, transfers rely on UK-approved safeguards such as the UK Addendum to the EU Standard Contractual Clauses or adequacy decisions.

We do not sell personal data.

5. How long we keep data

Order, subscription, and billing records are kept for as long as needed to provide the Service and to meet legal obligations (for example tax and accounting rules, typically six years in the UK). Marketing consent records are kept while you are subscribed and afterwards as needed to demonstrate or honour your consent choice. One-time sign-in links expire after 2 hours and management sessions after one hour. Support conversations are kept for as long as needed to handle your request and improve support quality.

6. Your rights

Under UK GDPR you have the right to access your personal data, to have it corrected or erased, to restrict or object to processing, and to data portability. To exercise any of these rights, email support@forsenfx.com. You also have the right to complain to the Information Commissioner's Office (ico.org.uk).

7. Changes

If we change this policy we will update this page and the date above. Material changes affecting active customers will be notified by email.