Privacy Policy

This Privacy Policy describes how CompositeFX (“CompositeFX”, “we”, “us”) collects, uses, stores, and shares information when you use the CompositeFX website and product (the “Service”).

CompositeFX is an FX research desk: we aggregate forex headlines and economic-calendar releases, then produce AI pair notes (for example XAUUSD, GBPUSD, USDJPY, EURUSD). You may also keep a private trading journal and optional workspaces.

If you choose Sign in with Google, Google shares with us — through our authentication provider, Clerk — the information tied to the OAuth scopes you approve. We use Sign in with Google only to create and authenticate your CompositeFX account.

We receive:

• Your Google account email address
• Your Google account name
• Your Google account profile photo, if you have one
• A unique Google account identifier, used by Clerk to keep you signed in

We use that Google user data only to:

• Create, authenticate, and secure your account
• Display your name, email, and avatar in CompositeFX
• Associate your journal, workspaces, and notification settings with you
• Send account-related messages (for example security or service notices), when email is enabled

We do not access Gmail, Google Drive, Google Calendar, Contacts, or other Google Workspace data. We do not request sensitive or restricted Google scopes. We do not sell Google user data, use it for advertising, or send it to AI model providers.

CompositeFX’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

You can disconnect Google from CompositeFX in your Google Account permissions. You can also delete your CompositeFX account as described below.

Account information. When you sign up (email, Google, or another method Clerk offers), we store identifiers such as your Clerk user id, email, name, username, profile image, role, timezone, and last sign-in time. Clerk also processes authentication cookies and security signals (for example IP address and device data) as described in Clerk’s own privacy policy.

Journal and workspace content. If you use the journal, we store the notes, mood, plans, recaps, trades, imported history, and screenshots you upload. If you use workspaces (organizations), we store workspace name, membership, and the journal data you keep in that workspace.

Notifications. If you enable browser push, we store a push endpoint, encryption keys, and an optional user-agent string so we can deliver alerts on that device.

Product usage. Our hosts may log technical data needed to run the Service (for example request times, error logs, and approximate location derived from IP). We use essential cookies for sign-in. Theme preference is stored in your browser. Sidebar layout may be stored in a local cookie.

Market content (not personal). We ingest public and licensed news, calendars, and AI briefs. That content is not your personal data unless you add it to your journal.

We use personal information to:

• Provide, operate, and improve the Service
• Authenticate you and keep workspaces and journals separate
• Send optional alerts you request
• Detect abuse, debug failures, and secure accounts
• Comply with law and enforce our Terms of Service

AI pair briefs are generated from market news and calendar data, not from your Google account or journal, unless you later choose a feature that explicitly sends your notes to a model (we will update this policy before doing so).

We do not sell your personal information. We share it only with processors who help us run the Service, and only as needed:

• Clerk — authentication, including Sign in with Google
• Convex — application database, file storage (journal screenshots), and backend functions
• Email delivery (for example Resend) — transactional mail when that feature is configured
• Push infrastructure — browser push services when you opt in
• AI providers — market text for pair briefs, not Google user data

Workspace members you invite can see journal data in that workspace. We may disclose information if required by law, to protect rights and safety, or in a merger or sale of the business (you would still be owed notice as required).

We use essential cookies and similar storage to keep you signed in (Clerk session) and to remember simple UI preferences (theme in local storage; sidebar open state in a cookie). These are required for the product to work or are limited to presentation. We do not currently use advertising cookies or sell browsing data to ad networks.

We keep account and journal data while your account is active. If you delete your account, we delete or de-identify personal data we control within a reasonable period, except where we must retain records for security, dispute, or legal reasons. Backups may persist for a short time before they rotate.

We use industry-standard measures (HTTPS, authenticated APIs, processor access controls). No method of transmission or storage is completely secure. Protect your password and the devices you use to sign in.

Depending on where you live, you may have rights to access, correct, export, or delete personal data, and to object to or restrict certain processing. To exercise those rights, email compositefx@acelords.com. You can also:

• Update name and profile details on the Profile page
• Turn off push notifications on Notifications
• Revoke Google access at myaccount.google.com/permissions
• Delete your account through Clerk account management in the product (User menu) or by asking us to delete it

If we decline a request, we will explain why where the law requires it. You may also complain to your local data-protection authority.

The Service is not directed to children under 13 (or the equivalent minimum age in your country). We do not knowingly collect personal information from children. If you believe a child has created an account, contact us and we will delete it.

We and our processors (including Clerk and Convex) may process data in the United States and other countries. Those countries may have different data-protection laws than yours. By using the Service, you understand that your information may be transferred to those locations.

We will update this page when our practices change. The “Last updated” date at the top is the current version. If we change how we use Google user data, we will update this policy and, where required, ask you to consent before using that data in a new way.

Questions about this Privacy Policy or our use of Google user data: email compositefx@acelords.com. Our Terms of Service are at /terms.