Privacy Policy

1. Data We Collect

We collect information necessary to provide our services: name, email address, phone number, date of birth, address, government-issued ID documents (for KYC), and payment records. We also collect technical data such as IP addresses and device information for security purposes.

2. How We Use Your Data

Your data is used to: verify your identity (KYC), process payments and withdrawals, calculate and credit your investment returns, send account notifications and statements, comply with legal obligations, and maintain platform security.

3. Data Security

We implement industry-standard security measures: TLS 1.3 encryption in transit, AES-256 encryption at rest for sensitive data, file upload validation, rate limiting, HMAC-signed webhook verification, session security with automatic timeouts, and 2FA support. KYC documents are stored in encrypted, access-controlled storage.

4. Data Sharing

We do not sell your personal data. Data may be shared with: (a) payment processors (Paystack, Flutterwave) to process transactions, (b) our MT5 broker for trade execution, (c) legal authorities if required by law. All third parties are contractually bound to protect your data.

5. Retention

We retain your data for as long as your account is active plus 7 years thereafter, as required for financial record-keeping and regulatory compliance. KYC documents are retained for the legally required period.

6. Your Rights

You have the right to: access your personal data, request corrections, request deletion (subject to legal retention requirements), object to processing, and request a copy of your data in a portable format. Contact us at privacy@f2fcapital.com to exercise these rights.

7. Cookies

We use only essential session cookies required for platform operation and security (CSRF protection). We do not use advertising cookies or third-party tracking.