FX AURAPrivacy Policy
What we collect, why, and the choices and rights you have
Last updated: October 28, 2026 · FX Aura Trading, fxauratrading.com
1. Who we are
FX Aura Trading ("we", "us") runs the website fxauratrading.com and the dashboard behind it. For the personal data described here, we decide why and how it is processed (we are the "controller" or "business"). Contact us at [email protected] for any privacy question or request.
2. What we collect
Account details. Your username, email address and a salted, one-way hash of your password (we never store the password itself), your role (owner, view-only or customer), and when the account was created.
Trading account data sent by your bot. For each connected account: the account number, platform (MT4 or MT5), broker and server name, the account name as reported by the platform, currency, leverage, balance, equity, margin, open positions, closed trades, orders, deposits and withdrawals, and the bot version and connection status. We use this only to show your own dashboard and reports.
Technical and security data. IP address, browser and device type, pages requested and time stamps, and sign-in successes and failures, used to run, secure and troubleshoot the Service and to slow down or block abuse.
Communications. What you send us (for example a support email) and our replies.
What we do not collect. We do not ask for or store trading or investor passwords, card numbers (payments, if introduced, will go through a payment processor), government ID numbers, precise location, or biometric data. We do not use advertising or cross-site tracking tools.
3. How we use it, and our lawful reasons
To provide the Service you asked for (contract); to keep the Service safe, prevent fraud and misuse, fix problems and improve it (our legitimate interests); to communicate with you about your account and support requests (contract and legitimate interests); to comply with legal duties and respond to lawful requests (legal obligation); and for anything else only with your consent, which you can withdraw at any time. We do not use your data to make automated decisions that have legal or similarly significant effects on you.
5. Where your data is kept
Dashboard data is stored on our own server equipment in the United States. Traffic passes through Cloudflare's global network. If you use the Service from outside the United States, you understand your data is transferred to and processed in the United States and other countries where our providers operate, where data protection laws may differ from yours. Where the law requires, we rely on approved safeguards such as standard contractual clauses for those transfers.
6. How long we keep it
We keep account and trading data while your account is open. When you ask us to delete your account we delete it from live systems within 30 days; backup copies are deleted or overwritten on a regular schedule and are not kept longer than needed. Security logs and counters are kept only as long as needed for security. We may keep minimal records longer where the law requires or to resolve disputes and enforce our terms.
7. How we protect it
All connections use HTTPS encryption; passwords are stored only as salted hashes; owner and customer access is separated so people see only what they are allowed to; sign-ins are rate limited; the server sits behind a firewall that accepts traffic only through our security provider; and administrative actions such as viewing the bot key are restricted to the private network. No system is perfectly secure, so we cannot guarantee absolute security. If a breach affects your personal data, we will notify you and the authorities as the law requires.
8. Your rights and choices
Depending on where you live (for example under the EU and UK GDPR, the California Consumer Privacy Act as amended, the Texas Data Privacy and Security Act and other state laws) you may have the right to: know and get a copy of the personal data we hold about you; correct it; delete it; receive it in a portable format; restrict or object to certain processing; withdraw consent; and not be discriminated against for using your rights. We do not sell or share personal data for advertising, so there is nothing to opt out of; we also honour browser "Global Privacy Control" signals. To use a right, email [email protected]. We will verify your identity (for example by asking you to confirm from your account), and normally respond within 30 to 45 days. An authorized agent may act for you with your written permission. If we decline a request you may appeal by replying to our answer, and you may complain to your data protection authority or, in the United States, your state attorney general.
9. Children
The Service is for adults only (18 and over). We do not knowingly collect personal data from anyone under 18. If you believe a child has given us data, contact us and we will delete it.
11. Changes
We may update this policy. The date at the top shows the latest version. If a change is material we will make a reasonable effort to tell you before it takes effect.