Privacy Policy
Effective date:
About This Document
This document forms part of your legal relationship with FUNDED IQ LLC. In this document, we, us, and our mean FUNDED IQ LLC. You and your mean you as the person this document applies to. Read this document together with the General Terms and Conditions and any Product Schedule, programme terms, agreement, or policy incorporated into your Order or account.
FundedIQ provides simulated CFD evaluation and funded-account services. FundedIQ is not a broker, deposit-taker, custodian, or investment adviser, and the balances shown in FundedIQ accounts are not customer funds.
1. Controller and Scope
FUNDED IQ LLC, registered at Euro House, Richmond Hill Road, Kingstown, Saint Vincent and the Grenadines, is the controller of personal data used to provide FundedIQ services, unless a provider's notice identifies that provider as an independent controller. This Policy covers fundediq.com, app.fundediq.com, trader accounts, support, payments, KYC, simulated trading, rewards, affiliates, communications, and related operations.
2. Data We Collect
| Category | Examples |
|---|---|
| Identity and contact | Name, birth details, nationality, residence, address, email, telephone, signature, profile identifiers |
| KYC and compliance | Identity document, selfie or liveness result, facial comparison result, proof of address, PEP and sanctions results, occupation, source of funds, tax status, review notes |
| Account and transaction | Orders, fees, provider references, payment ownership, refunds, chargebacks, reward details, tax records |
| Trading and performance | Account settings, orders, positions, prices, timestamps, profit and loss, breaches, reviews, strategy and behavioural indicators |
| Device and network | IP address, approximate location, device token, browser, operating system, language, time zone, user agent, session and security events |
| Communications | Support requests, complaints, calls or messages, survey feedback, consent and preference records |
| Affiliate and business | Application, audience and channel details, traffic and conversion records, commission, tax and payment details |
3. Sources
We obtain data from you; your use of the websites, app, and trading platform; identity, payment, hosting, security, communication, and data providers; public sanctions and PEP sources; affiliates who lawfully refer you; and persons who report suspected abuse. We do not treat an affiliate's claim about you as verified without appropriate checks.
4. Purposes and Legal Bases
| Purpose | Typical basis where applicable |
|---|---|
| Register, provide accounts, process Orders and rewards | Contract performance and steps requested before contract |
| Verify identity, payment ownership, eligibility and location | Contract, legal obligation where applicable, and legitimate interests in fraud prevention |
| Sanctions, AML, fraud, security and rule enforcement | Legal obligation where applicable and substantial legitimate interests |
| Support, complaints, records and legal claims | Contract, legal obligation, and legitimate interests |
| Service analytics, reliability and product improvement | Legitimate interests using proportionate and minimised data |
| Marketing | Consent where required, otherwise permitted legitimate interests with opt-out |
| Optional cookies or biometrics | Consent where the applicable law requires it |
5. Automated Processing and Human Review
Automated systems flag risk-limit events, device or network anomalies, possible document or payment mismatch, sanctions or PEP matches, and suspected trading abuse. Hard numerical loss controls may automatically restrict a simulated account to prevent further breach. Other material adverse decisions are reviewed by trained personnel where appropriate. You may ask for human review, express your view, and challenge a decision, subject to lawful anti-fraud and tipping-off restrictions.
6. Service Providers and Recipients
We disclose only what is reasonably necessary to service providers and recipients including Veriff for identity verification; Supabase for database, authentication, and storage; Vercel and Cloudflare for hosting, delivery, security, and anti-bot services; Resend for email delivery; the payment provider selected at checkout; trading-platform and market-data providers; professional advisers, auditors, insurers, banks, and payout providers; and authorities or counterparties where lawfully required. Providers are subject to safeguards appropriate to their role.
7. International Transfers
We operate internationally and providers may process data outside your country, including in Saint Vincent and the Grenadines, the United States, the European Economic Area, and other service locations. Where transfer law applies, we use an adequacy decision, approved contractual clauses, provider commitments, or another lawful mechanism and assess supplementary safeguards where required.
8. Retention
| Record | Normal retention |
|---|---|
| Orders, payments, refunds, rewards, trading and breach records | Seven years after the transaction or account closure |
| KYC cases, identity evidence, screening and review events | Five years after the relationship ends, unless law requires longer |
| Identity-provider copy under the current provider plan | Normally two years, subject to provider and legal settings |
| Full network and identity-event IP addresses | Normally 120 days |
| Derived device, network and fraud-risk signals | Normally 30 to 365 days by signal class |
| Closed support requests | Two years |
| Email delivery records | One year |
| Read notifications | 180 days; notification records normally one year |
| Provider callbacks and operational attempts | 90 to 365 days |
| Backups | Nightly rolling copies normally expire within fourteen days |
9. Security
We use role-based access, encryption in transit, secrets management, logging, monitoring, network separation, session controls, backups, provider due diligence, and incident response measures proportionate to the data and risk. No system is perfectly secure. You must protect credentials and report suspicious activity promptly.
10. Your Rights
Depending on applicable law, you may request access, correction, deletion, restriction, portability, objection, withdrawal of consent, and human review of certain automated decisions. You may also complain to the data-protection authority that lawfully supervises the processing. Rights may be limited by identity verification, another person's rights, legal privilege, fraud prevention, sanctions controls, record-retention duties, or legal claims.
11. Making a Privacy Request
Email support@fundediq.com with the subject Privacy Request. State the right you wish to exercise and the account email. We may verify identity before responding. We aim to respond within one month where that period applies and will explain any lawful extension or refusal. Erasure removes or de-identifies data no longer needed; it does not override the retention of financial, KYC, security, dispute, or legal records.
12. Marketing
You may unsubscribe through a message link or account preference. Opting out of marketing does not stop service, security, legal, payment, or account communications. We do not sell personal data for money. If applicable law treats targeted advertising or certain sharing as a sale or sharing, we will provide the legally required choice before using it.
13. Children
We are for adults aged eighteen or older. We do not knowingly collect data from children for the service. If you believe a child provided data, contact us so we can investigate and delete it where appropriate.
14. Changes
We publish material changes with a new effective date and provide additional notice where required. A change does not retroactively alter the lawful basis or purpose for which data was originally collected without the notice or consent required by law.