Privacy Policy

1. Who Operates UFORX

UFORX is operated by XAST LTD, trading as UFORX, with its registered or principal business address at XAST LTD, 7 Bell Yard, London, WC2A 2JR.

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us at:
Email: support@uforx.io

2. Data We Collect

The personal data we collect depends on how you use UFORX, which devices you link, which services you connect, and what information you provide to us. We may collect the following categories of data:

2.1 Account, Login & Licence Data

• Licence email address and login details;
• Account identifiers, customer IDs, subscription status, licence status, and plan information;
• Authentication tokens, session data, password reset data, and security verification information.

2.2 Desktop Device & Linking Data

• Desktop device ID, linked desktop ID, and computer name;
• Desktop connection status, device ownership checks, pairing/linking status, and device timestamps;
• Software version, operating system information, error state, diagnostic data, and update status where required for support or security.

2.3 iOS App, Device & Session Data

• iOS device identifiers, app session identifiers, linked account/session data, and authentication status;
• Push notification tokens or device messaging identifiers where notification features are enabled;
• App version, device type, session timestamps, connection state, and command delivery status.

2.4 Relay, Sync & Command Data

• Relay connection status, online/offline state, timestamps, and heartbeat/status messages;
• User-initiated commands sent from the iOS app or dashboard to the linked desktop application;
• Command metadata, delivery status, expiry status, rejection status, and related logs.

2.5 Trading Status, Market & App Data

• Market or status data shown in the iOS app, dashboard, or desktop application;
• Account balance, equity, margin information, PnL, open trades, closed trades, trade partials, and trading logs;
• Strategy state, start/stop status, trade blocking status, risk settings, app settings, configuration values, and automation controls;
• Broker/API account IDs, MetaApi token data, or other trading API credentials where stored or transmitted as part of the Service.

2.6 Support, Communications & Feedback

• Support messages, Discord ticket messages, emails, issue reports, screenshots, logs, and attachments you send to us;
• Records of communications with you, including support history and troubleshooting notes.

2.7 Payment, Billing & Customer Records

• Customer records, payment status, invoices, subscription history, billing events, and cancellation requests;
• Limited payment information provided to us by payment processors, such as transaction IDs, payment method type, last four digits, billing email, and payment status.

We do not intentionally collect full card numbers through UFORX. Card payments are normally processed by third-party payment processors, and their own privacy policies apply to their handling of payment details.

3. Why We Collect and Use Your Data

We use personal data for the following purposes:

• To create, authenticate, and manage your UFORX account;
• To validate your login, licence, subscription, and permitted access;
• To link your iOS app, dashboard, and desktop application;
• To sync the iOS app with the linked desktop application;
• To send user-initiated commands to the linked desktop application;
• To show market status, account status, trade status, logs, settings, and connection information in the app;
• To provide technical support, investigate bugs, debug errors, and improve service reliability;
• To manage billing, subscriptions, invoices, refunds where applicable, cancellations, and customer records;
• To detect, prevent, and investigate fraud, unauthorised access, abuse, security incidents, or misuse of the Service;
• To comply with legal, accounting, tax, regulatory, and record-keeping obligations;
• To communicate with you about updates, support issues, security notices, changes to the Service, or changes to this Privacy Policy.

4. Legal Basis for Processing

Where UK GDPR, EU GDPR, or similar data protection laws apply, we rely on one or more of the following legal bases:

• Contract: to provide the Service you have requested, including account access, licence validation, device linking, app sync, and support;
• Legitimate interests: to secure the Service, prevent misuse, debug issues, improve reliability, manage customer relationships, and operate our business;
• Legal obligation: to keep required accounting, tax, compliance, and transaction records;
• Consent: where required for optional communications, cookies, analytics, push notifications, or similar optional features.

5. iOS App, Remote Control & Relay Processing

The UFORX iOS app is designed to monitor and control a linked UFORX desktop application. The iOS app does not independently run trading strategies or directly execute trades with a broker. Trading logic and broker execution remain dependent on the user’s desktop application, trading account, broker/API connection, and user configuration.

Where remote controls are available, actions such as starting or stopping trading, blocking trades, closing trades, or updating settings are initiated by the user through the app and transmitted to the linked desktop application. We may process command data, device/session identifiers, timestamps, command status, and related logs to deliver, verify, secure, and troubleshoot those controls.

UFORX may use a relay service to transmit status updates, settings, logs, and user-initiated commands between the desktop application and the iOS app. Relay messages are intended to route authorised messages only and may include connection status, trading status, app settings, trade information, and command delivery metadata.

6. Who We Share Data With

We may share personal data with trusted third parties where necessary to provide, secure, support, or bill for the Service. These may include:

• Hosting providers, cloud infrastructure providers, database providers, and relay service providers;
• Authentication systems, dashboard servers, licence servers, and security providers;
• Payment processors, billing platforms, and accounting providers;
• MetaApi, broker APIs, trading API providers, and connected broker/platform services where applicable;
• Apple services, App Store infrastructure, push notification services, and iOS platform services;
• Support tools, ticketing systems, communication platforms, email providers, and Discord or similar support channels where used;
• Professional advisers, insurers, law enforcement, regulators, or courts where required by law or necessary to protect our rights.

We do not sell your personal data.

Third-party services process your information under their own terms and privacy policies. We are not responsible for the privacy practices of third-party brokers, trading platforms, payment processors, Apple, MetaApi, Discord, or other external services that you choose to use or connect with UFORX.

7. Analytics, Cookies & Tracking

UFORX may use limited analytics, diagnostic, crash reporting, cookie, or tracking technologies to understand how the website, desktop application, iOS app, and dashboard are used, to improve reliability, and to detect technical issues or security risks.

Where required by law, we will request your consent before using non-essential cookies or tracking technologies. You may be able to disable certain analytics or tracking features through your browser, device settings, cookie controls, or app settings.

We do not use analytics data to sell your personal data.

8. MetaApi, Broker & Trading API Data

If you connect UFORX to MetaApi, a broker, trading platform, or another trading API provider, we may process the information required to make that connection work. This may include API tokens, account IDs, connection state, account status, balance, PnL, open trades, closed trades, order status, execution information, and trading logs.

Trading API credentials and broker-related data should only be used for the purposes of enabling the Service, syncing status, displaying trading information, sending user-authorised commands, providing support, and maintaining security. You remain responsible for your broker account, API permissions, trading settings, and any restrictions imposed by your broker or trading API provider.

9. How Long We Keep Data

We keep personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

• Account, licence, device linking, and configuration data is generally kept while your account or licence remains active;
• Trading logs, sync logs, command logs, diagnostic logs, and relay records may be kept for a limited period for support, debugging, security, and dispute handling;
• Support messages may be retained for as long as needed to resolve issues, maintain support history, and protect our legal rights;
• Payment, invoice, subscription, and accounting records may be retained for the period required by applicable tax, accounting, and legal obligations;
• Security logs may be retained where needed to investigate abuse, fraud, unauthorised access, or misuse of the Service.

When data is no longer needed, we will delete it, anonymise it, or securely archive it where appropriate.

10. Security Measures

We use reasonable technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure. These measures may include:

• Authentication tokens and session controls;
• Device ownership checks and linked-device verification;
• Encrypted transport for data transmitted between supported services, devices, and servers;
• Access restrictions for internal systems and customer records;
• Monitoring, logging, and security review of suspicious activity;
• Limiting access to personal data to people or service providers who need it to operate, support, secure, or bill for UFORX.

No software, app, network, or online service can be guaranteed to be completely secure. You are responsible for keeping your UFORX login details, desktop device, iOS device, broker account, API credentials, and linked accounts secure.

11. International Transfers

UFORX, our service providers, and third-party platforms may process or store personal data outside your country of residence, including in the United Kingdom, European Economic Area, United States, United Arab Emirates, or other countries where our providers operate.

Where required by applicable data protection law, we will use appropriate safeguards for international transfers, such as contractual protections, transfer risk assessments, adequacy regulations, or other legally recognised transfer mechanisms.

12. Your Privacy Rights

Depending on where you live, including if UK GDPR or EU GDPR applies, you may have rights over your personal data, including the right to:

• Request access to the personal data we hold about you;
• Request correction of inaccurate or incomplete personal data;
• Request deletion of your personal data in certain circumstances;
• Request restriction of processing in certain circumstances;
• Object to certain processing based on legitimate interests;
• Request a copy of certain data in a portable format;
• Withdraw consent where processing is based on consent;
• Complain to a data protection regulator, including the UK Information Commissioner’s Office if applicable.

These rights are not absolute and may be subject to legal limits, identity verification, fraud prevention, security requirements, accounting obligations, or other lawful reasons for retaining or processing data.

13. Access, Correction & Deletion Requests

You can request access, correction, or deletion of your personal data by contacting us at support@uforx.io. We may need to verify your identity before responding to your request.

If your request relates to broker data, MetaApi data, Apple data, payment data, or another third-party service, you may also need to contact that third party directly because they may act as a separate controller or independent service provider for their own records.

14. Account Deletion Process

You can request deletion of your UFORX account by using the account deletion option inside the iOS app where available, by visiting /delete-account, or by emailing support@uforx.io with the subject line “Account Deletion Request”.

Account deletion may remove or disable your UFORX account, licence access, linked device records, app sessions, and Service data that we are not required to keep. We may retain certain records where required for legal, tax, accounting, fraud prevention, security, dispute handling, or regulatory reasons.

Deleting your UFORX account does not automatically delete accounts, records, or data held by brokers, MetaApi, Apple, payment processors, Discord, or other third-party services. You should contact those services separately where needed.

15. Children

UFORX is not intended for children. You must be at least 18 years old, or the age of majority in your jurisdiction, to use the Service. We do not knowingly collect personal data from children.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the “Last updated” date at the top of this page. Where required by law, or where changes are material, we may provide additional notice through the website, app, dashboard, email, or another appropriate method.

If you continue to use UFORX after the updated Privacy Policy becomes effective, you acknowledge the updated policy.

17. Contact

If you have any questions, requests, or concerns about this Privacy Policy or how UFORX handles personal data, please contact us at:
Email: support@uforx.io
Operator: XAST LTD
Address: XAST LTD, 7 Bell Yard, London, WC2A 2JR