Last change to this text: Nov 3, 2026
Operator: Adam Alwan ("Finviro").
In short
- We do not sell your data.
- We do not ask for your brokerage account, and we do not trade for you.
- We encrypt sensitive fields, and we hide your IP address after 45 days.
- You can ask us to erase your data at any time.
What do we collect?
- When you sign up: your email, your name and your password. We keep the password as a hash that nobody can read. Your mobile number and address are optional, and we keep them encrypted.
- When you browse: the pages you visit and when, your browser and device type, and your IP address. We also keep your approximate country from that address and the source of the visit (for example, a campaign link). We record form problems and errors so that we can fix them.
- When you sign in: a sign-in log with your IP address, browser and approximate location. We keep the location encrypted, and we use the log to protect your account.
- What you create: your trading journal, paper trades, saved lists, support tickets and support chats.
- When you pay by card, Apple Pay or Google Pay: you pay on a secure page at a certified payment processor. Your card details never reach our servers and we do not store them. We send the processor your email and an internal order ID. We receive the payment confirmation, its amount and the transaction number, plus the billing name and address you enter there. We store the name and address encrypted and use them only on your invoice.
- When you pay with crypto (FinviroPay): we receive the payment confirmation only. We never see your wallet keys.
- When you pay another way, if it is available: for a bank transfer we keep the sender name and the receipt image, encrypted. With PayPal, you pay on the PayPal site.
- Invoice: we email it to you after every payment, and it stays in your account.
- Your consent to the billing policy: we record the time, your browser type and a token that does not show your address.
- What you choose to connect: your Telegram chat ID if you link your account. Your WhatsApp number if you agree to its messages. Your browser notification subscription if you turn it on.
- Your review of the platform: you can write a review and agree to publish it. Then we show your first name and the first letter of your family name. We also show your country and how long you have been a member. Without your consent, only our team sees it.
Why do we use your data?
- To run your account and give you what you subscribed to.
- To activate your subscription and stop abuse of the free trial.
- To protect your account and the platform from unauthorized access.
- To learn which pages help and where readers have problems, so that we can improve them.
- To send you the messages in the next section.
The messages we send
- Service messages: email confirmation, billing and security. You get them while your account is open.
- Reports and newsletters: for subscribers to them. Each message has an unsubscribe link. Some report emails contain a small image that tells us if you opened the email.
- Introduction emails to people who did not sign up: we may email an address that is not registered with us, to introduce the platform. We record if the email is opened and if its links are clicked. We stop all later emails if you unsubscribe, if the email bounces, or if you sign up. If you got an email you did not ask for, write to support@finviro.com and we will erase your address.
- WhatsApp: only for people who agreed. We record the source and time of your consent, and you can unsubscribe at any time.
- Telegram and browser notifications: you get them only if you link your account or turn on notifications. You turn them off in the same settings.
Cookies and measurement
We use necessary cookies for the session, security and language. You can see them by name in the cookie policy.
We measure visits in two ways:
- On our server: the visit log described above. It does not go to a third party.
- Google Analytics: it works in consent mode. Before you agree, it sends measurement without cookies and without an advertising ID. After you agree, it writes its cookies in your browser.
- Microsoft Clarity: shows us how readers move through a page (clicks and scrolling) so we can see where they get stuck. It does not run before you consent. Once you consent it writes its cookies in your browser, and Microsoft's servers write their own cookies too. It never runs on sign-in, profile or payment pages.
The Google ads script loads only after you agree. It never loads on account, sign-in or payment pages.
If you reach us by clicking a Google ad, that click's ID stays in our site's links during your visit, so we can tell whether the ad led to a sign-up. It is not stored in cookies unless you consent, and it does not carry your name or email.
Who do we share your data with?
We share the smallest necessary amount with providers that run the service for us. We do not sell your data to anyone:
- Hosting and email: the server that runs the platform, and our email provider (Hostinger).
- Google: analytics as described in the previous section, reCAPTCHA protection at sign-up and sign-in, and Google sign-in for people who choose it. Also Google ads (AdSense), only after you agree and never on account, sign-in or payment pages.
- Microsoft: the Clarity tool, as in the previous section. It does not run on sign-in, profile or payment pages.
- Payments: a certified payment processor for cards, Apple Pay and Google Pay; FinviroPay for crypto; and PayPal or your bank if you use them.
- Messages: Telegram, WhatsApp (Meta) and the notification service of your browser, only for people who turn them on.
- Backups: we encrypt them on our server before they leave it, then we store them with a storage provider (Cloudflare R2). The provider cannot read them.
- Authorities: if the law requires it.
How long do we keep it?
- Your IP address in visit, sign-in and sign-up logs: 45 days. After that, we replace it with a token that does not identify you.
- Page view log: 120 days. Reading time log: 180 days.
- An account with an unconfirmed email: we delete it after 7 days and three reminder emails.
- A closed account: we keep it so that you can open it again, until you ask us to erase it.
- Other account data: while your account is open.
How do we protect it?
- Every connection to the platform is encrypted (HTTPS).
- We keep these encrypted: mobile number, address, sign-in location, and bank transfer details and receipts.
- We do not keep card details or wallet keys.
- But no system is completely secure.
Your rights
- See and correct your data: in your profile.
- Stop messages: use the unsubscribe link at the bottom of each message.
- Refuse measurement cookies: use the cookie banner. The site still works.
- Close your account: go to "Subscription and payments", then "Close account". Your access ends at once, and we keep your data so that you can open it again.
- Erase your data or get a copy of it: write to support@finviro.com or open a support ticket.
Adults only
The platform is for people aged 18 or older. We do not knowingly collect data from minors.
Changes to this policy
At the top of the page, we show the date of the last real change to the text, so you know when it changed.
Contact
For any question about your privacy: support@finviro.com.