Privacy Policy

Last updated:January 31, 2026

This Privacy Policy explains how Flowdex Labs processes personal data when you use the platform and its related services, including account creation, authentication, security checks, support communication, and product improvement. The platform is designed for financial market tools and features, which may include crypto-assets, Forex, CFDs, and stocks; specific transaction execution may occur through partners, where applicable.

What this policy covers and to whom it applies

This policy applies to personal data we obtain directly from you, automatically from your device and browser, and from service providers that help facilitate verification, security, payment processing (if applicable), or customer support. It applies to your use of the Flowdex Labs website and platform in Latvia.

What data we process

We process identification and contact information such as name, surname, email, phone number, and communication preference settings. We process account and profile data such as username, account status, language selection, notification settings, and security configuration. If required, verification data may be processed, such as document details, age verification proofs, proof of residence, or the results of the verification process.

We process technical and device data such as IP address, device identifiers, browser type, operating system, time zone, access logs, cookie identifiers, and similar online identifiers. We process usage analytics such as which pages or features are used, clickstreams, session duration, and error diagnostics.

In the context of trading, activity metadata may be processed, such as your chosen instruments, interface actions, views of signals or analytics, alert settings, and account-related events; this does not necessarily mean that Flowdex Labs holds your assets or directly executes transactions. If payments are used, we may process transaction-related information such as payment method, currency, transaction ID, and settlement status; full payment card details are typically processed within payment service providers' systems, not on our side.

Why we process data and what is the basis

We process data to ensure account creation and maintenance, authentication, access recovery, and platform operation. The basis for such processing is typically contract performance and service provision.

We process data for security purposes, including fraud prevention, detection of suspicious activities, access control, and incident investigation. Here, the basis is usually legitimate interests and, where applicable, the fulfillment of legal obligations.

We may process data for analytics and improvements to understand how the platform is used and to enhance stability, usability, and functionality; the basis is usually legitimate interests, but for certain technologies or marketing communications, consent and your choices may be used. This section is for informational purposes and should not be considered legal advice.

How we share data

We may share data with service providers that help provide hosting, system maintenance, analytics, customer support tools, and security monitoring. If verification is required, data may be transferred to identity verification service providers. If payments are applicable, data may be transferred to payment service providers and financial intermediaries only to the extent necessary for settlement. If the platform provides integration with execution partners or brokers, data necessary for account linking and service provision may be shared.

We may disclose data if necessary to comply with a legal obligation, respond to requests from competent authorities, protect our rights, or investigate fraud and security incidents.

Data retention and deletion

We retain data for as long as necessary for the purposes for which it was collected, including account maintenance, security and audit needs, dispute resolution, and fulfillment of legal obligations. Retention periods may vary depending on the type of data and context; when data is no longer needed, we delete or anonymize it within a reasonable timeframe.

International data transfer

If our service providers or infrastructure are located outside Latvia or the European Economic Area, data may be transferred to other countries. In such cases, we employ reasonable safeguards, such as contractual clauses and security controls, to ensure an equivalent level of protection.

Security

We implement organizational and technical measures designed to mitigate the risk of unauthorized access, data loss, or misuse. This may include access controls, encryption, log monitoring, incident response processes, and employee access restrictions. However, no system can guarantee absolute security, so we encourage you to use strong passwords, enable additional authentication if available, and report suspicious activity immediately.

Your rights and choices

Depending on the processing circumstances, you may have the right to request access to your data, rectification, deletion, restriction of processing, objection to processing, as well as data portability, where applicable. You may also have the right to withdraw consent where processing is based on consent, and to manage marketing communication settings.

How to submit a privacy request

To submit a request, contact us by email at [email protected]. To protect your account, we may ask for additional information for identity verification, such as confirmation from your account email or other security verification. We typically respond within a reasonable timeframe and, if the request is complex, we may ask for additional time, informing you of the reason.

Cookies and similar technologies

We may use cookies and similar technologies to provide basic functions, maintain sessions, enhance security, and analyze usage. Where applicable, you can manage your cookie preferences in your browser or platform settings, but blocking certain cookies may affect functionality.

Policy Changes

We may update this policy to reflect changes in services, security practices, or the regulatory environment. If the changes are material, we usually inform about them on the platform, by email, or through other reasonable means. The updated version takes effect from the moment of publication, unless otherwise stated.