Privacy Policy

This Privacy Policy explains how MYFXrefund collects, uses, discloses, stores, and protects personal data when you use our website, dashboard, and related services.

We are committed to data minimization, transparency, security, and responsible processing in line with applicable privacy laws.

We collect data you provide directly, data generated through service use, and data from service integrations.

• Account data: name, email, login metadata, account preferences.
• Claim data: broker identifiers, account email, claim workflow history, support context.
• Payout data: wallet addresses, payout method/network, processing states, transaction references.
• Communication data: support tickets, feedback, chat/email content related to service delivery.
• Technical data: IP address, user agent, device and browser details, session and security logs.
• Analytics data: feature interactions, page events, and aggregate usage metrics.

• Directly from you during registration, submissions, and support interactions.
• Automatically through cookies, logs, and similar technologies.
• From partners or processors where needed for verification, payout handling, and compliance checks.

We process personal data only where there is a valid purpose and legal basis.

• Service performance: account operation, claim lifecycle, payout execution, and notifications.
• Security: fraud prevention, abuse detection, anomaly monitoring, and access control.
• Compliance: legal obligations, sanctions/AML screening where applicable, and audit logging.
• Support: handling requests, troubleshooting, and incident response.
• Product improvement: reliability, analytics, UX optimization, and quality assurance.
• Communications: service notices and, where permitted, product updates/marketing.

Depending on your location, we rely on one or more legal bases including contract necessity, legal obligation, legitimate interests, and consent (where required).

Where processing is based on consent, you may withdraw consent at any time without affecting prior lawful processing.

We use cookies and related technologies for session security, authentication, preferences, and analytics.

Strictly necessary technologies are used to operate core functionality. Non-essential analytics/marketing technologies are used according to applicable consent rules.

• You can accept, reject, or customize non-essential cookies in our cookie consent banner.
• You can manage browser cookie settings at any time.
• Blocking certain cookies may reduce or break parts of the service experience.

We do not sell personal data for money. We share data only as needed for service operation or legal compliance.

• Infrastructure and cloud providers (hosting, monitoring, email delivery, support tooling).
• Payment and payout processors (to execute or verify withdrawals).
• Broker/partner integrations (to validate claim eligibility where required).
• Professional advisers (legal, audit, compliance) under confidentiality obligations.
• Authorities or counterparties when required by law, court order, or to protect rights and safety.
• Corporate transaction counterparties in mergers, acquisitions, or asset transfers, subject to safeguards.

Your data may be processed in jurisdictions outside your country of residence.

Where required, we apply lawful transfer mechanisms and appropriate safeguards, such as contractual protections and security controls.

We retain personal data only as long as necessary for the purposes described above, including legal, accounting, fraud-prevention, and dispute-resolution needs.

Retention periods vary by data type and context. Transaction, security, and audit records may be retained longer where required by law or legitimate operational need.

We implement technical and organizational safeguards designed to protect personal data, including encryption in transit, access controls, monitoring, and least-privilege access policies.

No internet transmission or storage system is guaranteed 100% secure, and you should also protect your own account, device, and email credentials.

Subject to applicable law, you may have rights to access, correct, delete, or restrict processing of personal data.

• Access and portability requests.
• Correction of inaccurate or incomplete data.
• Deletion requests (subject to legal and operational retention exceptions).
• Objection to certain processing and marketing opt-out.
• Complaint rights with a relevant supervisory authority.

If you are in the EEA/UK, we provide GDPR-style transparency on legal bases, retention, transfer safeguards, and rights.

If you are in California, you may have rights under California privacy law (including rights to know, delete, correct, and limit certain disclosures), subject to statutory exceptions.

We do not knowingly sell or share personal data for cross-context behavioral advertising in a way that triggers opt-out rights, unless explicitly disclosed in a separate notice.

The Services are intended for adults and are not directed to children under 18.

If we learn that personal data was submitted by a child in violation of applicable law, we will take steps to delete that data.

Our Services may contain links to third-party sites or tools we do not control. Their privacy practices are governed by their own policies.

We encourage you to review third-party policies before sharing personal information with them.

We may update this Privacy Policy to reflect legal, technical, or operational changes.

When material changes are made, we will update the "Last updated" date and provide additional notice where required by law.

For privacy inquiries or to exercise rights requests, contact [email protected].

To help protect your account, we may need to verify identity before processing certain requests.