Privacy Policy
Last updated: 29 July 2026
1. Who we are
This privacy policy explains how ForexDNA ("we", "us", "our") collects, uses, and protects the personal data of visitors to our website and users of our service ("you", "your"). ForexDNA operates the website at dna.forex. For any questions about this policy or your data, contact admin@dna.forex.
2. What data we collect
We collect only the personal data we need to operate the service: your full name, email address, and a hashed password when you register; two-factor authentication secrets and device identifiers if you enable 2FA; a referral code identifying the user who invited you (if any); and account activity such as sign-in timestamps and device information used for security purposes. When you connect a broker account, we store the account number, the server name, the account currency, and your MT5 trading password. The password is stored in our database, and additionally kept in an AES-256-GCM encrypted form whose key is held in a separate system. Once we have verified your account the password is removed from our main records and retained only in restricted internal storage. We never display it back to you and never send it by email.
3. Legal basis for processing
We process your personal data under the following lawful bases: (a) performance of a contract, processing is necessary to provide the service you signed up for; (b) legitimate interests, securing the platform against fraud and abuse, and improving the service; (c) consent, where you have given clear consent, such as opting into marketing communications; (d) legal obligation, where processing is necessary to comply with applicable law.
4. How we use your data
Your data is used to: create and maintain your account; authenticate you when signing in; deliver the automated trading service to your connected broker account; display your trading activity and account statistics on your dashboard; contact you with important service updates and security notifications; investigate suspected fraud, abuse, or breaches of our Terms & Conditions; and comply with our legal obligations.
5. What we do NOT do
We do not sell your personal data to third parties. We do not use your data for advertising profiling. We do not share your data with brokers or partners beyond what is strictly necessary to operate the service. We restrict access to your broker credentials to the systems and staff that need them to connect your account, and we remove them from our main records once your account has been verified. We do not access your broker account for any purpose other than executing the strategy you have signed up for.
6. Third-party processors
We use a small number of third-party services to operate the platform: Supabase (authentication and database, hosted in the EU); Vercel (website hosting and cookieless analytics); and your chosen broker (currently Vantage Markets) for trade execution. These providers process your data on our behalf under data processing agreements. We do not use behavioural advertising, tracking pixels, or third-party analytics cookies.
7. Cookies and local storage
We use only strictly necessary cookies and browser storage: an authentication session cookie so you stay signed in; a two-factor authentication cookie so you don't have to re-verify on trusted devices; and browser localStorage for site preferences (theme, chat history if you use the support chat). We do not use tracking, advertising, or analytics cookies.
8. Data retention
We retain your account data for as long as your account is active. When you delete your account (via Account → Danger zone), your personal data is permanently deleted from our systems within 30 days, except where we are required to retain certain records for legal, tax, or fraud-prevention purposes. Backup snapshots may take longer to expire but are inaccessible except in disaster recovery scenarios. Broker credentials are deleted when you disconnect the account or delete your ForexDNA account, whichever is sooner. You may withdraw your authorisation for us to trade your account at any time by contacting admin@dna.forex.
9. Your data rights
You have the right to: access the personal data we hold about you; correct inaccurate data; request deletion of your data (the "right to be forgotten"); restrict or object to certain processing; receive your data in a portable format; withdraw consent at any time; and complain to your local data protection authority if you believe we have mishandled your data. To exercise any of these rights, contact admin@dna.forex.
10. Data security
We take security seriously. Passwords are hashed using industry-standard algorithms and never stored in plaintext. Two-factor authentication is available and encouraged for every account. Sensitive tokens are encrypted using HMAC signing bound to your session. All traffic between your browser and our servers is encrypted in transit (HTTPS). Broker trading passwords are encrypted at rest with AES-256-GCM, and the decryption key is stored in a separate system from the database so that neither on its own is sufficient to read them. Every decryption is logged.
11. International transfers
Your data is primarily stored on servers in the European Union. Some of our processors may transfer data outside the country where data is stored; where they do, transfers are protected by appropriate safeguards (Standard Contractual Clauses or adequacy decisions).
12. Children
The service is not intended for anyone under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us immediately and we will delete it.
13. Changes to this policy
We may update this privacy policy from time to time. Material changes will be communicated by email or via a notice on the website. The "Last updated" date at the top of this page will always reflect the most recent version.
14. Contact
For any questions, concerns, or requests relating to your personal data or this policy, contact us at admin@dna.forex.