Privacy Policy & POPIA Notice

FXNESUS EA ("FXNESUS", "we", "us") is the responsible party for the personal information processed through this website and the FXNESUS application. Our Information Officer can be reached at privacy@fxnesus.com.

• Account information: email address, display name, password hash (we never see your password in plain text), and account role (client, mentor or administrator).
• Mentorship information: the mentor desk you are linked to, licence keys issued to you, assigned strategies and lessons.
• Broker connection information: broker name, server, account login reference, account type, currency, leverage and reported balance. We do not ask for, store or transmit your broker trading password or investor password.
• Payment information: the amount, reference, product selected and any proof-of-payment document you upload for manual EFT verification. We do not store card numbers or banking credentials.
• Technical information: device identifiers you register, IP-derived request logs, browser type and error diagnostics used to keep the service secure and working.
• Usage information: scans performed, robot connection state, and trade records generated by your mentor's robot on your linked account.

We process personal information only where POPIA permits it, namely:

• Performance of a contract: to create and operate your account, link you to a mentor, issue licences and deliver the trading tools you signed up for.
• Legal obligation: to keep financial and payment records and to respond to lawful requests.
• Legitimate interest: to secure the platform, prevent fraud and abuse, and improve reliability.
• Consent: for optional communications and any processing beyond the above. Consent may be withdrawn at any time.

We do not knowingly process special personal information as defined in section 26 of POPIA, and we do not knowingly process the personal information of children under 18. The platform is intended for adults only. If you believe a child's information has been provided to us, contact us and we will delete it.

We share personal information only with operators who process it on our instruction under written confidentiality and security obligations: our cloud hosting and database provider, our authentication and storage provider, and market-data providers used to display prices. Your mentor sees only the information needed to service you: your display name, licence status, broker verification status and robot activity. We never sell your personal information.

Our infrastructure providers may store or process data on servers outside South Africa. In line with section 72 of POPIA, we only use providers that are bound by contractual terms giving your information a level of protection substantially similar to POPIA.

• Encryption in transit (HTTPS/TLS) for all traffic, and encryption at rest for stored records and uploaded documents.
• Row-level security so each account can only reach its own records; mentor and administrator access is role-checked on the server.
• Private storage buckets for proof-of-payment documents and application builds — never publicly listable.
• Passwords are salted and hashed by our authentication provider; staff cannot read them.

If a security compromise occurs where there are reasonable grounds to believe your personal information has been accessed by an unauthorised person, we will notify you and the Information Regulator as required by section 22 of POPIA.

We keep account and mentorship records for as long as your account is active. Payment and proof-of-payment records are kept for five years to meet financial record-keeping obligations. Diagnostic logs are kept for a maximum of 12 months. When a retention period ends we delete or de-identify the information.

• Access: request confirmation of and a copy of the personal information we hold about you (section 23).
• Correction or deletion: request that we correct, complete or delete information that is inaccurate, irrelevant, excessive, out of date or obtained unlawfully (section 24).
• Objection: object on reasonable grounds to processing based on legitimate interest (section 11(3)).
• Withdraw consent: withdraw consent for optional processing at any time, without affecting past lawful processing.
• Complain: lodge a complaint with the Information Regulator.

Send requests to privacy@fxnesus.com. We respond within 30 days and may ask you to verify your identity first. You can also delete most of your own data directly from your account settings.

We use strictly necessary cookies and browser storage to keep you signed in and to remember interface preferences. We do not use advertising or third-party tracking cookies. Blocking necessary storage will stop sign-in from working.

Information Regulator (South Africa), JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001. Email: enquiries@inforegulator.org.za. Complaints: POPIAComplaints@inforegulator.org.za.

We may update this notice as the platform evolves. Material changes will be announced in the application, and the "last updated" date above will change. Continued use after an update means you accept the revised notice.