Privacy Policy

1. Who we are

The controller of your personal data is Fazen Group, which runs the Fazen Capital website and services.

For anything about your data, write to [email protected].

2. What we collect and why

Your account

• What: your email address, and optionally your name and a password. We store the password only as a hash. When you ask for a sign-in link or move your key to another trading account, we record the IP address of the request.
• Why: to create your account, let you sign in and send you your AiX key.
• Legal basis: performance of a contract (GDPR art. 6(1)(b)).

Getting started with AiX

• What: your country, taken from your connection; the deposit range you choose; the page and the campaign that brought you to us; a customer identifier that we add to the link when you open an account with one of our partner brokers.
• Why: to send you to a broker that accepts clients from your country, and to know that the account was opened through us. That is how AiX stays free.
• Legal basis: performance of a contract (art. 6(1)(b)) for sending you to the broker; our legitimate interest in recognising the accounts opened through us (art. 6(1)(f)).

Data we receive from our partner brokers

• What: when you open an account with a partner broker through our link, the broker (directly or through its partner-tracking platform) sends us your user ID at the broker, your trading account numbers, the type of event (sign-up, deposit), deposit and withdrawal amounts, traded volume, your country, what the broker pays us for your account and our customer identifier. We do not receive your name or email from the broker.
• Source (GDPR art. 14): your broker. It is not a publicly accessible source.
• Why: to confirm your sign-up and your live account, so that AiX works on them.
• Legal basis: performance of a contract (art. 6(1)(b)).

Your trading accounts (sent by the AiX EA)

• What: when AiX runs on an account, it sends us the account number, broker server, account type and leverage; balance, equity, margin, net deposits and broker credit; open positions and closed trades; the EA version and the MetaTrader 5 build. We store the connecting IP address only in hashed form.
• Why: to tie your key to your accounts and apply its rules, and to show your results in your dashboard.
• Legal basis: performance of a contract (art. 6(1)(b)).

Telegram

• What: your Telegram ID, username and name, and the messages you send to our bot. From the conversation, the bot keeps a short profile (language, trading experience, open questions) to tailor its answers.
• Who answers: an AI model answers your messages. It receives your recent messages, your profile and your AiX status (key status, linked accounts, last signal from the EA), but never your email address. If you ask for a person, your name, username, Telegram ID and your last message go to our team.
• Legal basis: performance of a contract (art. 6(1)(b)). You can stop the automatic messages at any time with /stop.

Emails

• What we send: account emails (sign-in links, notices about your key or a paid product) and short help emails while you set up AiX, for example if you haven't finished your sign-up or AiX hasn't started on an account yet.
• What we record: which emails were sent to you, and that you unsubscribed, if you did.
• Legal basis: account emails, performance of a contract (art. 6(1)(b)); help emails, our legitimate interest in helping you complete the setup you started (art. 6(1)(f)).
• How to stop them: every help email has an unsubscribe link. Emails you ask for, such as sign-in links, still arrive.

Measuring our ads and site statistics

• What: fazencapital.com uses the Meta Pixel, Google Analytics and Vercel Analytics, which collect information about your visit (pages viewed, device, browser, approximate location). On our Insights articles, Google AdSense shows ads. If you arrive through a campaign of one of our partner brokers, that broker's Meta Pixel also runs on the page and receives your page view and your sign-up.
• Server events: we also send some events to Meta from our servers: opening an account with the broker, downloading AiX, starting AiX on demo or live, and your first live account with its deposit amount. They carry your email in hashed form (SHA-256), your IP address and browser information, Meta's click identifiers (fbp, fbc), which we store with your account, and the page, your language, the account type and the campaign.
• Why: to know which ads bring people who actually use AiX, and how the site is used.
• Legal basis: our legitimate interest in measuring our advertising and our site (art. 6(1)(f)).

Security

• What: Cloudflare protection and Cloudflare Turnstile on our email forms; hashed IP address and browser information on clicks to brokers and partners; reports of technical errors (Sentry).
• Why: to keep bots and abuse out, and to fix errors.
• Legal basis: our legitimate interest in keeping the service secure (art. 6(1)(f)).

Paid products (not AiX)

• What: your email, name, country and billing address, through Stripe, when you buy a paid product.
• Legal basis: performance of a contract (art. 6(1)(b)) and legal obligations for invoices (art. 6(1)(c)).

What you must give us

• Your email is needed to create an account.
• Your trading account number is needed for the AiX key to work.
• Everything else is optional or collected automatically, as described above.

3. Automated decisions

The AiX key follows fixed rules, applied automatically:

• AiX runs only on the servers of our partner brokers;
• up to 10 demo accounts at a time;
• on demo, AiX pauses after 72 hours until your sign-up with the broker is confirmed;
• live trading only on accounts opened through us and funded with at least the minimum deposit.

These rules decide whether AiX runs on an account. They do not use your profile and have no other effect on you. To ask for a review by a person, write to [email protected].

4. Cookies and similar technologies

Vercel Analytics measures visits without cookies. The dashboard stores two small preferences in your browser: the installation steps you have completed and the banners you have closed. You can delete cookies at any time from your browser settings.

5. Who receives your data

We do not sell your personal data.

6. Transfers outside the European Economic Area

Our site runs on servers in the United States, and several of the providers above are based in, or process data in, the United States. Where a provider is certified under the EU-U.S. Data Privacy Framework, the transfer relies on the European Commission's adequacy decision of 10 July 2023; otherwise it relies on the standard contractual clauses in the provider's data processing terms. To get more information about these safeguards, write to [email protected].

7. How long we keep your data

• Account, keys and trading data: as long as your account exists. You can ask us to delete your account and your data at any time.
• Telegram conversations: as long as your bot profile exists, or until you ask us to delete them.
• Records of your unsubscribe: as long as needed to respect it.
• Payment records: as long as tax law requires.

8. Your rights

You can ask us to:

• give you access to your data and a copy of it;
• correct it;
• delete it;
• restrict how we use it;
• send it to you or to someone else in a portable format.

You can also object to processing based on our legitimate interests, object at any time to direct marketing, and withdraw any consent you gave, without affecting what we did before.

To use any of these rights, write to [email protected] from the email of your account. We answer within one month; if a request is complex we can take up to two more months, and in that case we tell you within the first month.

If you think we are not handling your data correctly, you can complain to a data protection authority, in particular in the EU country where you live or work, or where the problem happened.

9. Age

Our services are for adults. Trading accounts are for people aged 18 or over, and we do not knowingly collect data from anyone younger.

10. Security

• Passwords are stored only as hashes.
• Sign-in links work only once, expire, and are stored only as hashes.
• Access to our systems is limited to our team.

11. Changes

If we change this policy, we update the date at the top. If a change matters for how we use your data, we tell you by email or in your dashboard before it applies.