Privacy Notice

1. Who is responsible for your data?

BIGMANFX, is the data controller for personal information processed to operate bigmanfx.com. Paddle separately handles personal information for its Merchant of Record activities under its own privacy notice.

2. Information we collect and why

• Account and authentication: email address, login credentials or Google sign-in identifiers, verification requests and security records, to create accounts, verify access and recover passwords.
• Member profile: real name, trading name, country, adult-status confirmation, trading experience, years, style, goals and motivations, to provide your member profile and learning experience.
• Learning and certificates: member IDs, module scores, exam responses and timing, simulator trades and reports, certificate names, scores and verification IDs, to track learning, assess results and issue verifiable certificates.
• AI analysis: uploaded chart screenshots, request information, analysis results and credit usage, to provide and meter the analyzer. Do not upload screenshots containing private account numbers or unrelated personal information.
• Technical and usage records: IP addresses, browser/device information, access events and error or diagnostic records, to secure the service, prevent abuse, investigate faults and improve reliability.
• Communications and preferences: support messages and email-news choices, to respond to requests and send opted-in gold and silver news.
• Subscription records: plan, status, billing references and usage allowances received from Paddle, to grant and manage purchased access. Card payments are handled by Paddle, not by our account forms.

3. Legal bases

We process account, learning, analyzer and subscription information to perform our contract with you; security, diagnostics and support information for legitimate interests in providing a safe, reliable service; optional news emails on consent; and records required for compliance on the basis of legal obligations. Where consent is required for optional storage or other processing, you may withdraw it without affecting earlier lawful processing.

4. Sharing and public certificate checks

We use service providers for hosting, account storage, authentication, email delivery (Resend), AI processing and operational diagnostics. They receive information needed for their work. Chart screenshots are sent to our AI processing provider to generate the requested analysis. Google receives information when you choose Google sign-in.

We share relevant information with Paddle for product sales, subscription management, payments, tax compliance and invoicing; with professional legal or accounting advisers where necessary; and with authorities where legally required. We do not publish your private profile or exam answers.

A certificate verification link or QR code makes limited printed certificate facts available to anyone who has the link: the printed name, certificate or graduation ID, verification status and relevant score or mission facts. It does not expose your email, private profile answers or full exam responses.

5. Retention

We keep information only as long as needed for the purposes above, including maintaining your account, learning history and certificate verification, resolving disputes and meeting legal obligations. Verification codes have a short expiry and cannot be used indefinitely. Retention varies by record type and applicable obligations; when information is no longer needed, we delete or anonymise it. You can request account deletion, subject to any lawful need to retain particular records.

6. Security and international processing

We use appropriate technical and organisational safeguards, including encrypted connections, restricted access, account authentication and private-record access controls. No online system can be guaranteed completely secure.

Our providers may process information in countries other than your own. Where UK or EEA data protection rules apply, transfers outside those regions are subject to applicable safeguards, such as adequacy decisions or Standard Contractual Clauses, as required by law.

7. Your rights and email choices

Depending on the law applicable to you, you may request access, correction, erasure, restriction, portability or object to processing. You may withdraw consent and complain to your local data protection authority. Where GDPR applies, we respond within one month, subject to legally permitted extensions, and may need to verify your identity.

Market news emails are optional. Change your preference in your account or use the unsubscribe link in a news email. Essential account-verification and recovery emails are separate from marketing subscriptions.

8. Cookies and browser storage

Essential cookies or browser storage support sign-in, security and continuity of account access. Local preferences remember your language and day/night theme; browser storage may also retain introductory practice progress. Payment and sign-in providers may use storage necessary for their services.

You can manage or clear cookies and site storage in your browser. Blocking essential storage may prevent sign-in or checkout, and clearing it removes saved local preferences. Optional analytics or marketing cookies, if introduced, require the applicable consent controls before use.

9. Contact and updates

For service questions, privacy requests or intellectual-property complaints, contact BIGMANFX, through the official BIG MAN FX Telegram channel. Include enough information to identify your request, but do not post passwords, payment details or other sensitive information publicly. For billing and refunds, visit paddle.net.

We may update this notice as the service changes. The date above identifies the latest revision.