นโยบายความเป็นส่วนตัว Privacy Policy

The data controller under this policy is the operator of MySignalsFX.

• Privacy contact: [email protected]
• General contact: LINE @mysignalsfx

For questions or to exercise the rights in section 08, please email the address above. We will respond within 30 days as required by law.

Information you give us directly

• Name and email address (at registration)
• LINE ID (optional — used for contact and support)
• Trading account number (MT5/MT4/cTrader) — used solely to bind your EA licence
• Anything you send us when asking a question or reporting a problem

Information generated by using the service

• Order history, invoices and payment status
• Licence status, expiry dates, and the history of account bindings/rebinds
• Signals from the EA you install — it sends your account number and last-run timestamp to our server for licence validation (shown as "last seen…" in your account)
• General technical data such as IP address, device type and access times

What we never collect

• Your trading account password — we only ask for the account number, never the password, and we have no access to your funds or trade orders
• Card numbers — for online payments, card details are held by the payment provider and never pass through our servers
• Sensitive data under PDPA section 26 (race, religion, health, biometrics, etc.)

Your website password is always one-way hashed before storage. Our team cannot see your actual password.

We do not use your data for profiling or automated decisions that produce legal effects on you.

We never sell, rent or trade your personal data for marketing. We disclose only what is necessary, to the following parties:

• Infrastructure providers — Cloudflare (hosting, database and file storage), acting as a data processor on our instructions
• Payment providers — once online payment is enabled, only the data required for the transaction is sent directly to them
• Advertising measurement — Google (cookie-based usage data only; never your name, email or trading account number)
• Partner brokers — only if you open an account through our referral link. That broker may report back that your account came via us, for commission purposes. Opening an account with a broker is governed by that broker's own privacy policy, not ours.
• Authorities or legal process — where lawfully required

Trading results shown publicly on this site are our own accounts or accounts we are authorised to publish — never customer accounts. We never publish your results or account number.

The services we use are global providers, so your data may be stored or processed on servers outside Thailand.

We select providers with internationally recognised data-protection standards and appropriate data-processing agreements in place.

• Member account and contact details — while the account is active, plus 1 year after last use
• Billing and payment records — 10 years, as required by Thai accounting and tax law (retained even if you request deletion)
• Licence binding history — 2 years, to protect your account and prevent licence abuse
• Technical logs — no more than 90 days

After these periods we delete the data or render it non-identifiable.

You have the following rights over your own personal data:

• Access and obtain a copy of the data we hold about you
• Rectify inaccurate or outdated data (you can edit most of it yourself in your profile)
• Erase data once it is no longer needed for its purpose
• Restrict processing temporarily
• Object to certain kinds of processing
• Port your data to another provider in a machine-readable format
• Withdraw consent at any time (for example, advertising cookies)
• Lodge a complaint with Thailand's Personal Data Protection Committee

How to exercise them: email [email protected] from your registered address stating which right you wish to use. We respond within 30 days.

Please note: deleting your account immediately and irreversibly disables any bound EA licences, and billing records must still be retained for tax purposes.

• Passwords are one-way hashed (PBKDF2) before storage — staff can never see the real password
• All connections are encrypted with HTTPS
• Accounts are temporarily locked after repeated failed sign-in attempts
• Private pages are set to no-store and are blocked from search engines
• Access to customer data is limited to those who need it to deliver the service

No system is 100% secure. In the event of a breach posing a high risk to your rights, we will notify you and the relevant authority within 72 hours as required by law.

This site uses the following cookies and browser storage:

• Strictly necessary — sign-in state, light/dark theme and language choice (cannot be disabled; the site would not work)
• Advertising and measurement — Google Ads, to measure whether our advertising works (withdraw consent by blocking cookies in your browser)

Pages containing your personal data (My account, Invoice, Checkout, Password reset) carry no advertising scripts at all, by design.

This service is intended only for people aged 20 or over, as it involves high-risk investment activity.

We do not knowingly collect data from minors. If we discover such an account, we will delete the data immediately.

We may update this policy as the service or the law changes. The "Last Updated" date above always reflects the current version.

If a change materially affects your rights, we will notify you by email or by notice on the website in advance.