PRIVACY POLICY

The controller for data processing on this website is:

Swiss Onyx Trading LLC
5 Riyadh Street, Umm Hurair 2
Dubai Courts Building
Dubai, UAE
Contact form: fxcurio.com/contact

We process personal data of our users in accordance with Art. 6 GDPR where applicable. Processing takes place to perform the contract (Art. 6(1)(b)), to comply with legal obligations (Art. 6(1)(c)) and on the basis of legitimate interests (Art. 6(1)(f)).

On registration we collect an email address and an encrypted password. Authentication runs through a managed auth service. Passwords are only stored as a cryptographic hash and cannot be viewed in plain text.

We process the data entered by the user (e.g. trades, watchlists, prop accounts, settings) in order to provide CURIO's functionality. This data is stored per user and is not visible to other users (row-level security). Market and price data is sourced from third parties (e.g. Twelve Data) and is subject to their terms of use.

For AI-assisted analysis (Curio AI engine), market data and — if uploaded by the user — images are transmitted to a third-party AI computing provider for evaluation. This data leaves the application for evaluation. It is not passed on to any other third parties.

Payments are processed by Stripe. Stripe processes payment information (card data, transaction data) in line with PCI DSS. We do not receive complete card or bank details from Stripe, only a subscription reference and the contract status.

If a user opts into the Telegram bot, the chat ID submitted during linking is stored in order to send push notifications. Communication runs through the Telegram API. The user can remove the link at any time in the settings.

When the website is accessed, technical connection data (IP address, timestamp, requested resource) is automatically recorded in server logs. This data is processed to ensure operation and security and is deleted after a short period.

We store personal data only for as long as required for the respective purpose or as prescribed by statutory retention periods. After an account is cancelled, user-related data is deleted within a reasonable period.

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and objection (Art. 21) at any time. To exercise these rights, use our contact form at fxcurio.com/contact and choose the topic «Privacy & data requests».

CURIO uses local browser storage (localStorage / sessionStorage) for session and settings data. No tracking cookies are used.

We reserve the right to adapt this privacy policy in order to implement legal changes or to reflect new services.