Privacy Policy

This policy explains what happens to your data when you use FOQUS: the website foqus.pro, the web app app.foqus.pro and the FOQUS mobile apps.

1. Who is responsible for your data

The operator of FOQUS ("we") is responsible for processing your data. Send any question about your data to contacts@foqus.pro.

2. What data we receive

Account

your e-mail address;
if you sign in with Google or Apple, your identifier there and your e-mail; we do not request your name or photo;
your language, time zone, plan, balance in the service and the time of your last visit;
the two-factor authentication secret, if you turned it on, stored encrypted;
an Apple token, if you sign in with Apple, stored encrypted and only so that we can revoke it when you delete your account;
who invited you and whom you invited.

Where you came from. When you sign up, we record the campaign tags of the link, the name of the site that sent you and the first foqus.pro page you opened, to see which channels bring users.

Sign-ins. For each sign-in: the IP address, the browser and device, and the time. You can see them in the settings, under "Security".

Exchange and broker connections

Binance, Bybit, OKX: the API key and secret, and for OKX also the passphrase. We store the secret and the passphrase encrypted.
MetaTrader 5: the login, password and broker server. We store the password encrypted.

Trading data. From connected accounts we receive positions, trades and fills, order history, stop-losses and take-profits, balances and margin, fees and funding, deposits, withdrawals and transfers.

Your records. Notes and trade reviews, ratings, tags, note attachments (photos and videos), interface settings.

Public profile. Your nickname and avatar, if you set them. We strip the metadata of an uploaded avatar, such as where the photo was taken.

Support requests. E-mails to contacts@foqus.pro and messages to @foqus_help on Telegram, with everything you write in them.

What we do not collect: identity documents, phone number, name, date of birth, bank card details or precise location. There is no FOQUS account password.

3. Why we use data

Purpose	Data	Legal basis under the GDPR
Running your account and signing you in	e-mail, sign-ins, two-factor authentication	contract, Art. 6(1)(b)
Building the journal from exchanges and brokers	connections, trading data	contract, Art. 6(1)(b)
Showing metrics, reviews and AI features	trading data, your records	contract, Art. 6(1)(b)
Protecting the service from attacks and abuse	IP addresses, browser, server logs	legitimate interest, Art. 6(1)(f)
Finding and fixing errors	server logs	legitimate interest, Art. 6(1)(f)
Seeing which channels bring new users	where you came from at signup	legitimate interest, Art. 6(1)(f)
Answering support requests	your requests	contract or legitimate interest
Meeting legal requirements	what the law requires	legal obligation, Art. 6(1)(c)

We do not sell data, show ads, build advertising profiles or send newsletters. The only e-mails we send are codes for signing in and for confirming account deletion.

4. Artificial intelligence features

Some features, such as questions for a trade review, text improvement and voice input, run on language models from external providers. To get an answer, we send them only what the answer needs: trade data and the text of reviews and notes. We do not send them your e-mail, keys or connection passwords, and we do not keep voice recordings.

We share data only with those the service cannot run without, and only what their task needs:

the hosting provider whose servers run FOQUS;
services that protect and deliver the website and send e-mails;
language model providers, for the AI features;
Google and Apple, if you sign in with their accounts;
exchanges and brokers, to receive your trading data;
payment providers, once payments are available. You enter card details at the provider; we do not see them.

Each of them must protect the data at least as well as this policy describes and use it only for their task.

The service loads coin and company logos from third-party servers. These servers see your IP address.

If you joined by invitation, the person who invited you sees your e-mail in masked form (the first letter and the domain), your sign-up date and whether you have connected an account.

Within FOQUS, only a small number of people have access to data, and only for support and for checking how the service works.

We disclose data to public authorities only when the law requires it.

6. Where data is stored

Our servers are in Germany, in the European Union. Some providers process data outside the EU, including in the United States. Where the GDPR requires it, such transfers rely on an adequacy decision of the European Commission or on standard contractual clauses.

7. How long we keep data

Account, connections, journal and records: as long as the account exists. If you delete a connection, its data is deleted too.
Exchange sync service data: from one day to 90 days.
Sign-in history: as long as the account exists.
Server logs are kept for a limited time.
Backups are refreshed regularly. Deleted data disappears from them at the next refresh.
After you delete your account, we keep only security records.

8. How we protect data

The website, the web app and the apps work only over a secure connection (HTTPS).
Key secrets, MetaTrader 5 passwords and two-factor secrets are encrypted.
Exchange connections are read-only. FOQUS cannot trade or withdraw funds.
Access to our servers is restricted and protected.

No protection is absolute. If a breach threatens your rights, we will inform you and, where the law requires it, the supervisory authority.

9. Your rights

You can:

find out what data we hold about you and get a copy of it;
correct inaccurate data;
delete your account and data, yourself in the settings ("Data" → "Delete account") or by e-mail request;
receive your data in a machine-readable format; for now we prepare such an export on request;
restrict processing or object to it;
complain to the data protection authority in your country.

Write to contacts@foqus.pro and we will answer within 30 days. To make sure a request comes from you, we may ask for a code sent to your account's e-mail.

10. Cookies and browser storage

We use only what the service cannot work without:

the sign-in cookie keeps you signed in for up to 30 days;
short-lived cookies for signing in with Google and Apple and for the two-factor check live up to 10 minutes;
the interface language cookie is kept for a year.

Browser storage holds the current session data and the interface settings. Chart drawings are stored only in your browser. The browser caches some chart data and erases it when you sign out.

We have no advertising cookies and no analytics counters, so there is no cookie banner.

11. Public links and profile

A trade link opens for anyone who has it. It does not show notes, tags or balances, and you can hide stops, take-profits and limit orders yourself. A revoked link stops opening immediately.
The public profile shows your nickname, avatar, sign-up date and when you were last online. Trades appear in the profile only for the accounts you have made public yourself. Search engines may show the profile.

12. Age

FOQUS is not intended for people under 18. If you learn that a child has given us their data, write to us and we will delete it.

13. Changes to this policy

We may update this policy. We will announce material changes in the service or by e-mail at least 14 days before they take effect. The date of the current version is shown at the top of this page.

This policy is published in English, Russian and Ukrainian. If the versions differ, the English version prevails.

14. Contact

E-mail: contacts@foqus.pro
Telegram: @foqus_help