Privacy Policy

1. Who we are

GuvFX is operated by Virtus Logic UK Ltd (trading as GuvFX), a company registered in England and Wales under company number 13318959, whose registered office is Airport Business Centre, 10 Thornbury Road, Plymouth, England, PL6 7PP. GuvFX is available at guvfx.com. The data controller for personal data processed through GuvFX is Virtus Logic UK Ltd; privacy and data-protection enquiries may be sent to support@guvfx.com.

2. The optional email connection

Withdrawal Intelligence is optional and operates only if you explicitly connect a supported email account.

Scope requested: read-only Gmail access only — https://www.googleapis.com/auth/gmail.readonly. We never request permission to send, delete or modify your email, and we do not request any other Google data (no Drive, Contacts or Calendar).

What we read: we read emails from recognised brokers (a sender allowlist). We derive funding and withdrawal events only from messages that also pass email authentication; a message from a recognised broker that fails authentication is retained as evidence but produces no event. We use the derived events to summarise your withdrawal activity.

How we process it: processing is deterministic and automated. As part of this feature's automated processing, no GuvFX employee reads your email, and no large language model or other AI processes your email content (the limited exceptions in which a human may access data are described below under Limited Use). We derive specific, structured facts from each message; the original broker email is retained as described in section 3 (we do not discard it).

3. What we store

The full raw broker email, retained write-once in a separate, access-controlled evidence store that is held apart from our application database (and outside our code repository); an integrity hash and a pointer to that email in the database; the structured events we derive (such as a withdrawal request or completion, amount, broker and timestamp); and an opaque reference to your encrypted access credential.

Your Google OAuth tokens are encrypted and stored separately from our application database; the database holds only an opaque reference. Tokens are never written to logs.

We never send, forward, delete, label or modify your email.

4. How your data is protected

Credentials are encrypted at rest and held separately from the application database. Access follows least privilege, your data is isolated per account (you only ever see your own data), and administrative interfaces are restricted to authorised operators and are not publicly accessible.

5. Other data we process

Account data you provide (email and authentication), the trading-account and performance data you connect to the platform, and standard operational and security logs used to run and secure the service.

6. Legal bases (where GDPR / UK GDPR applies)

Consent for the optional email connection (withdrawable at any time by disconnecting); performance of a contract to provide the platform; and legitimate interests in security, fraud prevention and service improvement, balanced against your rights.

7. Retention and deletion

Disconnecting your email in GuvFX removes GuvFX's stored access to that mailbox and stops further reading. You can also remove GuvFX's access directly in your Google Account (see section 8).

Broker-email evidence is retained write-once in a separate evidence store. A controlled process for erasing your derived records and stored evidence on request is being implemented; until it is live for your account, erasure requests are handled on a case-by-case basis — contact support@guvfx.com — and some records may be retained where we are required to keep them by law or for fraud-prevention and security.

Operational and security logs are retained for a limited period; security and legal-evidence records (such as authentication and credential events) may be kept longer under a lawful basis.

8. How to disconnect and delete access

In GuvFX: open Withdrawal Intelligence and use Disconnect on the connected email account.

In Google: go to myaccount.google.com, then Security, then your connections to third-party apps and services, select GuvFX, and remove access.

9. Sharing and international transfers

We do not sell or rent your data. We share only with the service providers necessary to run the platform, under contract, and as required by law. Sub-processors: Google (the Gmail API, for the optional read-only email connection, and Google's email service for our own email) and OVHcloud (hosting of the GuvFX platform and its databases within the European Economic Area). Your personal data is stored on servers within the European Economic Area (OVHcloud, Milan, Italy); transfers from the UK to the EEA are covered by UK adequacy and need no additional safeguard. If you use the optional Gmail connection, Google processes the data involved and may do so outside the UK/EEA, subject to Google's published terms, including the Google API Services User Data Policy.

10. Your rights

Depending on your jurisdiction you may have rights to access, rectification, erasure, restriction, portability, objection and withdrawal of consent. Contact support@guvfx.com. You may also complain to your data-protection authority; in the UK this is the Information Commissioner's Office (ICO).

11. Changes and contact

We will post changes here and update the date above. Questions: support@guvfx.com. We have not appointed a Data Protection Officer; data-protection enquiries may be sent to support@guvfx.com.