Privacy policy
What we collect, why we collect it, and what you can ask us to do with it.
Last updated: 29 July 2026
In short: we collect what we need to run your membership and nothing more. We don't sell your data, we don't run advertising trackers, and you can ask us to export or delete your account at any time.
1. Who we are
Aura CFX ("we", "us") operates aura-cfx.com, a trading education platform based in the United Arab Emirates. This policy explains how we handle personal data collected through the website, the member dashboard, and our email communications.
For any privacy question or request, contact us at support@auracfx.com.
2. What we collect
Information you give us
- Account details — your name, email address, password (stored only as a secure hash — we never see or store it in readable form), timezone and language preference.
- Profile information you choose to add, such as a Telegram username.
- Messages you send us through the contact form or support requests.
- Payment proof — if you pay by bank transfer or USDT, the screenshot or reference you upload so we can verify the payment.
Information created by using the platform
- Learning activity — which lessons you've started and completed, and your progress position in videos.
- Membership and payment records — plan, term dates, amounts, payment method, and status. Needed for access control, accounting, and tax compliance.
- Booking records — mentoring sessions you reserve, attend, or cancel.
- Practice trading activity — simulated positions and results. This is virtual data with no real financial value.
- Referral records — who referred you, or who you referred, and any rewards earned.
- Security logs — IP address, browser/device type, and timestamps for logins and significant account actions. We use these to detect unauthorised access and abuse.
What we deliberately do not collect
We never see or store your full card number. Card payments are processed entirely by our payment providers; we only receive a confirmation and a reference. We do not collect government ID, we do not ask for your brokerage credentials, and we will never ask for your trading account password or API keys — anyone who does is not us.
3. Why we use it
- To provide the service — creating your account, granting access to the tier you paid for, tracking progress, running bookings. (Legal basis: performance of our contract with you.)
- To take and verify payments, issue receipts, and meet accounting obligations. (Contract and legal obligation.)
- To communicate with you — verification emails, payment confirmations, booking reminders, and important service notices. These are not marketing and cannot be opted out of while your account is active.
- To keep the platform secure — rate limiting, fraud prevention, detecting shared or compromised accounts. (Legitimate interest.)
- To improve the academy — understanding, in aggregate, which lessons are completed or abandoned. (Legitimate interest.)
- Marketing emails, if you opt in — you can unsubscribe at any time, and doing so never affects your membership. (Consent.)
4. Who we share it with
We do not sell your personal data, and we do not share it with advertisers or data brokers. We share only what is necessary with:
- Payment providers (such as Stripe, Ziina, PayPal) — to process your payment. They act as independent controllers under their own privacy policies.
- Our hosting provider — which stores the site and database on our behalf.
- Our email provider — to deliver transactional email.
- Professional advisers or authorities — only where we are legally required to, or to establish or defend legal claims.
Some of these providers operate outside the UAE, which means your data may be processed abroad. We use established providers that offer appropriate contractual safeguards.
5. Third-party content on our pages
Some pages embed third-party services — TradingView charts, an economic calendar, market price feeds, and Google Fonts. When these load, the provider may receive your IP address and basic browser information. We do not control their processing; please refer to their own privacy policies. We do not run advertising or cross-site tracking pixels.
6. Cookies
We use a small number of cookies, all functional:
- Session cookie — keeps you logged in while you use the dashboard. Essential.
- "Remember me" cookie — only if you tick that option at login, so you don't have to sign in each visit.
- Preference cookies — your chosen language, stored so the interface loads correctly.
We do not use advertising or analytics-profiling cookies. Blocking essential cookies will prevent you logging in.
7. How long we keep it
- Account and learning data — while your account is active, and for up to 12 months after it becomes inactive, so you can return without losing progress.
- Payment records — retained for as long as accounting and tax law requires, typically at least 5 years. These survive account deletion because we are legally required to keep them.
- Payment proof uploads — deleted once the payment is verified and the retention period for the related record has passed.
- Security logs — typically 12 months.
- Contact messages — up to 24 months after resolution.
8. Your rights
You can ask us to:
- Access the personal data we hold about you, or receive a copy of it;
- Correct anything inaccurate — most details you can edit yourself under Account;
- Delete your account and associated personal data, subject to records we must legally retain;
- Object to or restrict certain processing;
- Withdraw consent for marketing at any time.
Email us and we will respond within 30 days. We may need to verify your identity first — usually by confirming you control the account's email address.
9. Security
We protect your data with HTTPS encryption in transit, hashed passwords, CSRF protection on every form, rate limiting on login attempts, access controls on member content, and audit logging of significant actions. Uploaded payment proofs are stored outside the publicly accessible web directory and are viewable only by administrators.
No system is perfectly secure. If a breach occurs that is likely to affect your rights, we will notify affected members and any required authority without undue delay.
10. Children
Our service is not intended for anyone under 18. We do not knowingly collect data from children. If you believe a minor has created an account, contact us and we will remove it.
11. Changes
If we make material changes to this policy, we will update the date above and notify active members by email or an in-app notice.
12. Contact
Privacy questions or requests: use our contact form or email support@auracfx.com.