Privacy Policy

Account data: display name, email address, country (if you provide it), timezone, password hash held by our authentication provider, and sign-in and device activity used to secure your account.

Trading-account data: the broker server name and trading account login you connect, plus balances, equity, open positions, trade history and risk-check results synchronised from your trading platform. Your trading account password is used to establish the encrypted connection and is not stored in our database or returned to the browser.

Content you create: trade journal entries, notes, screenshots you attach, plans, targets and settings.

Payment and subscription data: subscription status, plan, billing country and transaction identifiers from our payment provider. We never receive or store full card numbers.

Technical data: IP address, browser and device information, pages visited and error diagnostics, used to operate the service, detect abuse and fix faults.

To provide and operate the LiveFXPlan service, including creating and managing user accounts, connecting supported trading accounts, synchronising permitted trading data, applying user-configured trading-management and risk-control settings, providing planning, journaling and analytics functionality, administering subscriptions, providing customer support, maintaining platform security, and improving service reliability.

Lawful bases: performance of our contract with you (providing the service and your subscription); our legitimate interests (platform security, fraud and abuse prevention, service improvement, support); compliance with legal obligations (accounting and tax records, and responding to lawful requests); and your consent, where we ask for it (marketing email and non-essential cookies), which you can withdraw at any time.

We do not carry out identity-document verification, financial suitability assessments, funded-account evaluations, or our own anti-money-laundering or sanctions screening. Payment-related compliance checks are performed by our payment provider under its own terms.

We use essential cookies and browser storage to keep you signed in, remember your theme and workspace preferences, and protect the service. These are required for the platform to function.

We record aggregated, privacy-aware usage counts (such as page visits and app-installation events) that are not used to build advertising profiles and are not sold. Details are in our Cookie Policy.

Processors acting on our instructions: our cloud hosting, database and authentication provider; our payment provider; our transactional email provider; the trading-data connectivity provider used to reach your trading platform; and the AI provider used for optional in-app coaching features, which receives only the content needed to answer your request.

Authorities where we are legally required to disclose. We never sell your personal data and we do not use your trading data to trade.

Some processors operate outside the UK and EEA. Where that happens, transfers rely on adequacy decisions or Standard Contractual Clauses together with appropriate technical safeguards.

Your account data, trading records, journal entries and settings are kept while your account is active. When you delete your account, your trading connections are removed and your personal data and content are deleted or anonymised, other than records we must keep.

Payment and accounting records are retained for the period required by tax law (generally six to seven years). Security and audit logs are retained for a limited period for fraud prevention and incident investigation.

You may request access to your data, correction, deletion, restriction of processing, portability, or object to processing based on legitimate interests. You may also withdraw consent to marketing at any time.

You can delete your account from the platform, or email support@livefxplan.com to exercise any right. We respond within one month. If you are unhappy with the outcome you may complain to your local data protection authority (in the UK, the Information Commissioner's Office).

Data is encrypted in transit and at rest. Access is restricted by row-level database policies so that you can only read your own records. Trading-platform credentials and provider API tokens are handled server-side only, are never exposed to the browser, and are excluded from application logs.