FederGEX — Privacy Policy

Last updated: 1 October 2026

1. Who is responsible

Federico Sanna, operating under the FederGEX brand, is the controller for the personal data described here. Contact federgex@gmail.com for privacy questions and rights requests. This policy covers the public website, account area, dashboard, API and FederGEX support. Independent services, including Telegram, WhatsApp and payment providers, also process data under their own policies.

2. Data we process

We process your account name and email, authentication records and identifiers, subscription plan and status, payment-related identifiers, billing-period information and limited card information returned by Stripe, such as brand and last four digits. Full payment-card details are handled by Stripe rather than entered into FederGEX systems.

Technical processing can include IP addresses, request times, session identifiers, device or browser information, API-key identifiers, usage counters and security or error records. Your personal API key is linked to your account; do not send it in support messages.

Support messages may contain information you provide, attachments and troubleshooting details. Remote support is offered only by prior arrangement; its method and relevant provider will be explained before access. Close unrelated sensitive information and do not disclose passwords. Sessions are not recorded without separate information and agreement.

Dashboard preferences and drawings can be saved locally in your browser. Local storage is separate from your server-side account and may persist after your paid access ends. Clearing browser data may remove it. See the Cookie Policy for technical storage.

3. Purposes and legal bases

We do not treat acceptance of Terms as consent to marketing. This policy does not authorize optional advertising tracking. If optional processing requiring consent is introduced, appropriate information and consent arrangements must be provided first. Subscription entitlement and technical rate limits may be applied automatically; you can contact support to ask for review of an access restriction. FederGEX does not use these controls to make trading or investment decisions for you.

4. Providers and recipients

We use Supabase for account, authentication and application data; Stripe for payments and subscription management; Vercel for hosting and web infrastructure; Upstash Redis for technical infrastructure including API rate control; and a VPS for market-data processing. Support email and messages are processed through the chosen communication services. GitHub supports code deployment and is not an intended destination for customer account records.

Providers receive the information needed for their functions. Some act as processors under service arrangements; others, including payment and communication services, may also act as independent controllers for their own purposes. Access may also be given to professional advisers or competent authorities where necessary and lawful. We do not sell your personal data.

5. Location and international transfers

The selected Supabase project region is Germany. This does not mean every provider, support operation or item of technical data is located only in Germany. Other services may involve processing outside the European Economic Area. Where a restricted international transfer occurs, applicable safeguards must be used, such as an adequacy decision or standard contractual clauses with additional measures where necessary. Contact us for information about the safeguards applicable to your data.

6. Retention and account deletion

Cancellation or a failed payment ends paid access according to the subscription status; it does not automatically delete your account. Keeping the profile allows you to subscribe again without registering again.

For accounts with no active subscription and no login for 12 months, we review inactivity manually and send a notice to the registered email. You then have 30 days to log in and retain the account; otherwise we proceed with manual deletion. This is a manual procedure, not an automated email system.

You may request earlier deletion at federgex@gmail.com. We verify the request proportionately and address any active subscription with you. Cancellation of renewal remains separately available in your account. Deletion does not require removal of records we must lawfully retain, for example applicable accounting records or information needed for an existing legal claim; retained records are limited to those purposes.

Technical rate counters are short-lived and expire according to the rate-control mechanism. They are not the same as hosting logs or backups. Security and diagnostic records are kept for the period necessary to investigate faults, prevent abuse and address incidents, considering their sensitivity and any ongoing investigation. Support correspondence is retained while needed to resolve the request and, where necessary, address related disputes. Provider backups are subject to their configured rotation and are not necessarily erased immediately when a live account is deleted. We do not claim that all logs or personal data are erased after 24 hours.

7. Your rights

Subject to applicable conditions, you may request access, correction, erasure, restriction, portability, and object to processing based on legitimate interests. Where processing relies on consent, you can withdraw it without affecting earlier lawful processing. Contact federgex@gmail.com; never send your password or full API key. We normally respond within one month, with any lawful extension explained to you.

You may complain to the Italian data protection authority, Garante per la protezione dei dati personali, or the competent supervisory authority where you live or work. You do not have to contact us first.

8. Required information, security and changes

Account and billing information required to supply the service must be provided to obtain paid access. Optional support information is voluntary, although insufficient details may limit troubleshooting. We apply appropriate safeguards, including access controls and authentication; no system can guarantee absolute security. The service is intended for adults, not children under 18.

We update this policy when processing changes and communicate material changes where required. Contact federgex@gmail.com for questions. See also the Terms of Service and Cookie Policy.