Privacy Policy

2. Information We Collect

Depending on how you use FXUnfold, we may collect:

3. How We Use Your Information

We process personal information for legitimate educational and operational purposes including:

1. Creating, authenticating, and maintaining student accounts.
2. Protecting account integrity and enforcing security safeguards.
3. Providing seamless access to enrolled courses and curriculum modules.
4. Accurately recording lesson completions and educational progression.
5. Administering interactive quizzes, market simulations, and summative examinations.
6. Processing transactions, verifying enrollments, and applying promotional discounts.
7. Generating and cryptographically verifying official certificates of completion.
8. Responding to inquiries, bug reports, and student support requests.
9. Preventing academic dishonesty, cheating, fraud, and unauthorized platform abuse.
10. Maintaining high availability, security hardening, and performance monitoring.
11. Complying with applicable statutory and legal obligations.
12. Sending essential service notifications and optional educational updates where permitted.

We process personal data only where an appropriate legal basis applies, including contractual necessity, legal obligations, legitimate educational interests, or express user consent when required.

4. Cookies and Similar Technologies

FXUnfold uses strictly necessary cookies and local storage tokens for user authentication, session persistence, security token verification (XSRF/CSRF protection), and UI preferences (such as dark mode).

We do not deploy invasive third-party cross-site advertising trackers. If non-essential analytics cookies are introduced, we will provide transparent disclosures and obtain your consent where required. You may manage or disable cookies via your browser preferences, although disabling essential authentication cookies may impede access to enrolled content.

5. Sharing Your Information

We do not sell, rent, or trade students' personal information to third-party advertisers. We disclose data solely to trusted infrastructure and service providers operating on our behalf:

• Payment Processors: Paystack (for secure payment processing and webhook settlement).
• Hosting & Cloud Infrastructure: Secure cloud application hosting and managed databases.
• Email Delivery Services: Transactional email providers for contact inquiries and verification messages.
• Legal Authorities: Where disclosure is strictly required by court order, statutory regulation, or to prevent immediate security threats.

6. Certificate Verification

When a student successfully satisfies the rigorous curriculum and examination requirements, FXUnfold issues a Certificate of Completion accompanied by a public verification URL.

7. Data Security

We implement comprehensive technical and organizational safeguards designed to protect personal information against unauthorized access, loss, or alteration. These measures include:

• Transport Layer Security (TLS/HTTPS) encryption across all endpoints.
• Bcrypt hashing with salted rounds for account credentials.
• Token-based Sanctum authentication and role-based access control (RBAC).
• Secure UUIDv7 primary keys to prevent sequential identifier enumeration attacks.
• Server-side validation and sanitized database parameter bindings.

While we employ industry-standard defenses, no internet transmission can guarantee absolute security. Users are responsible for safeguarding their login credentials and promptly reporting any suspicious activity.

8. Data Retention

We retain personal information only for as long as necessary to fulfill the educational purposes for which it was collected, maintain permanent certificate verification records, support account recovery, satisfy financial recordkeeping obligations, and resolve potential disputes.

When personal data is no longer necessary, it is securely deleted, anonymized, or destroyed in accordance with our data disposal standards.

9. Your Privacy Rights

Subject to applicable data protection laws, you may hold the following rights:

• Access: Request confirmation and a copy of the personal information we maintain about you.
• Rectification: Request correction of incomplete or inaccurate records.
• Erasure: Request deletion of your account and personal data, subject to statutory retention obligations.
• Restriction & Objection: Object to or restrict specific forms of data processing.
• Data Portability: Request transmission of your learning history in a machine-readable format.
• Withdraw Consent: Revoke consent at any time where processing is founded upon consent.
• Lodge Complaints: Submit inquiries to the competent data protection supervisory authority.

To exercise these rights, please email akiodetimothy2017@gmail.com. We may require proof of identity before fulfilling requests.

10. International Data Processing

FXUnfold is operated from Nigeria. Depending on cloud hosting and service provider infrastructure, your data may be processed on servers located internationally. Where cross-border data transfers occur, we take appropriate contractual and technical precautions to ensure protection equivalent to applicable domestic standards.

11. Children's Privacy

FXUnfold is strictly intended for individuals who are at least 18 years of age. We do not knowingly permit minors under 18 to create accounts, participate in examinations, or purchase courses.

If we discover that an account has been established by an individual under 18 without verified parental or legal authorization, we will promptly terminate the account and purge associated data.

12. Third-Party Websites

Our platform contains references and outbound links to external educational resources (such as SOWfx Instagram channels), open-source repositories (GitHub), and payment processors. We do not control and are not liable for the privacy practices, content, or data collection of external third-party sites.

13. Changes to This Policy

We may periodically update this Privacy Policy to reflect pedagogical improvements, technical upgrades, or legislative updates. The “Last Updated” date at the top of this document indicates when revisions took effect. Material modifications will be highlighted through platform notices or direct notification.

14. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact our developer and data protection lead: