Who is responsible
[Legal name of the business or person], trading as SachinFX, is responsible for your data. Contact: [support email].
What we collect
- When you create an account: your name, your email, your password (kept only as a one-way hash), your Telegram username if you give it, and whether you agreed to receive offers.
- When you sign in with Google: Google shares your name, your email, your profile picture and your Google account ID with us. We keep the name, email and ID, never the picture. We never see your Google password, contacts or files.
- When you buy directly: your MT5 account numbers and broker server, so we can build your licensed copy; your orders and their history; and what the payment service tells us about the payment (amount, coin, network and transaction reference). We never receive your card details or wallet keys.
- When you are signed in: the device and browser you use and when you last signed in, so you can see and sign out your devices, plus a record of downloads and account changes.
- When you join Lab Notes or a waitlist: your email address.
- When you send a project brief: whatever you write in it.
- When you visit: anonymous page statistics, without cookies [through Plausible Analytics].
Why we use it
To deliver what you asked for, to support you, and to send Lab Notes and offers such as festival discount codes if you agreed to them. Every offer email has an unsubscribe link. We do not sell your data, and we do not use advertising trackers.
Who we share it with
- NOWPayments (crypto payments)
- Cloudflare, which hosts the site, stores account, order and licence records and your licensed copies, and checks sign-ins for bots
- Google, for Google sign-in: its sign-in script runs on our sign in page only, so Google learns that page was opened and can offer one-tap sign-in; if you continue, it confirms who you are
- Our email sender [Resend], for sign-in codes, receipts and download links
- Telegram, for your VIP channel invite
- Our newsletter provider [Kit], if you sign up for Lab Notes or offers
Each one handles your data only to provide its service to us. Some of them process data outside India.
How long we keep it
- Your account, licences and their MT5 accounts: while your account is open, then [as long as tax and accounting law requires].
- Orders and payment records: [8 years], as tax and accounting law requires.
- Signed-in devices: until you sign out or the sign-in expires after 7 days.
- Your Google account ID: while Google sign-in is connected. Disconnecting Google deletes it.
- Download links: they stop working after 7 days.
- Sign-in codes: until used, and never longer than 10 minutes.
- Your newsletter email until you unsubscribe. Briefs for [12 months] unless we work together.
Your rights
You can ask for a copy of your data, ask us to correct, complete or delete it, withdraw your consent, and unsubscribe at any time. Under India's Digital Personal Data Protection Act, 2023 you can also nominate someone to act for you, and complain to the Data Protection Board of India if we do not resolve a complaint. Deleting your account ends your licences; order records we must keep by law are kept. [Rights under GDPR or other local law to be confirmed after legal review.]
Cookies
We use only essential cookies, which need no consent, and no advertising or tracking cookies. __Host-sfx_session keeps you signed in, for up to 7 days.
On the sign in page, a cookie that lasts 10 minutes, so each Google sign-in can be used only once.
Security
Passwords are kept only as a one-way hash, and sign-in codes and sessions are stored scrambled, never as typed. Licensed copies are stored privately and every download link expires. No system is perfectly secure; if your data is ever exposed, we will tell you and the authorities as the law requires.
Adults only
This site and our products are for people aged 18 or over. We do not knowingly collect data from anyone younger.
Grievances
Questions or complaints about your data go to our Grievance Officer: [full name], Founder, [support email], or contact us on Telegram. We acknowledge each complaint within 48 hours and resolve it within one month.
Changes
When this policy changes, we update this page and its date, and email you if the change is significant.