1. Who we are
ForecastPro is operated by Ahmad Najjar, trading as ForecastPro, 4297 Express Lane, BEY 86776, Sarasota, FL 34249-2602, United States (“we”, “us”). We are the controller of the personal data described in this policy. You can reach us at support@forecastspro.com.
2. Summary
- We collect only what we need to run your account, your trading assistant and your subscription.
- We never hold your funds. Your API keys are encrypted at rest and never written to logs.
- We do not sell your personal data, do not use it for advertising, and do not use it to train AI models.
- This website sets no cookies and loads no analytics or trackers. The app uses one strictly necessary session cookie.
- Deleting your account deletes the data tied to it, including your security log. The only exception: a record of each payment you made, without your email address, which tax and accounting law requires us to keep. 0xProcessing keeps its own record of each payment.
3. Data we collect
| Category | What it includes |
|---|---|
| Account data | Email address; password stored only as a salted Argon2id hash (we never store or see your password in plain text); account role; the dates you signed up, verified your email, accepted the Terms and acknowledged the Risk Disclosure; the date your access runs until; whether the account is disabled. |
| API keys | Keys you connect for your exchange, Anthropic and optional data sources (for example CryptoPanic, X or Reddit). Stored encrypted — see section 4. |
| Strategy settings | Budget, risk level, time horizon, watchlist, stop-loss / take-profit settings, analysis interval, chosen AI model and effort, scheduler on or off, and trading mode. |
| Trading journal | For each analysis cycle: the market snapshot used, Claude’s proposed decisions and reasoning, the risk gate’s verdict and the resulting orders (symbol, side, quantity, price, value, exchange order ID, exchange account ID, status and errors), plus AI token usage and estimated cost per run. |
| Exchange account data | Balances and open orders read from your exchange through your keys, to show them to you and to size and protect orders. Read when needed; not kept as a separate copy beyond the journal. |
| Payment records | See section 5: your orders, their status, the coin you chose and what 0xProcessing reports to us about each payment. |
| Session and security data | Session identifiers (stored only as hashes), session start, expiry and last-seen times, IP address and browser user agent; a security log of events such as sign-ins, failed sign-ins, password changes, key changes (which fields changed, never the keys) and trading-mode changes, with the IP address. |
| The emails we send you — email verification, password reset, payment receipts and access reminders — and any messages you send us. One-time links in our emails are stored only as hashes and expire. | |
| Technical data | Our application logs one line per request: the method, the path without its query string, the status code and the time taken — never IP addresses, cookies, headers or request bodies. Our hosting and network providers process connection data (such as IP address and user agent) to deliver and protect the Service. |
We do not ask for your name, postal address, date of birth, government ID or payment card details. If you withdraw from the contract (Terms section 14.3), we process what you send us for it — for example your name and address on the model withdrawal form, and the wallet address for your refund — only to handle the withdrawal.
4. Your API keys
- Keys are encrypted at rest with authenticated encryption (Fernet: AES-128 in CBC mode with an HMAC-SHA256 integrity check), using a server secret that is kept apart from the database.
- Keys are decrypted only in memory, only when a request on your behalf needs them, and are never displayed back to you in full or written to logs.
- Exchange keys that allow withdrawals are rejected for real-money trading. Please create trade-only keys with only the permissions ForecastPro needs.
- You can replace or remove your keys in the app at any time — in Settings, or on the billing page if your access has ended — and revoke them at the issuing service at any time.
5. Payments
You pay for ForecastPro in cryptocurrency through 0xProcessing (operated by 14partners Limited, Seychelles). When you start a payment we create an order and send 0xProcessing your email address, your account ID, the order ID, the price in US dollars and the coin you chose. You then pay on 0xProcessing’s hosted payment page.
We keep, for each order: the order ID, the price, the coin, the status and its timestamps, 0xProcessing’s payment ID, the version of the Terms you accepted and the consents you gave at checkout (with the time), and the payment notifications 0xProcessing sends us. Those notifications can include the amount received, blockchain transaction hashes and the wallet addresses the payment came from. Payments on a public blockchain are visible to anyone.
We keep these records while your account exists. When you delete your account, the payment notifications (with their wallet addresses and transaction hashes) are deleted, but for each order that a payment arrived for we keep a record without your email address: the order ID, 0xProcessing’s payment ID, the price, the coin, the amount received, the dates and the status, the version of the Terms and the consents you gave at checkout (with the time), and any withdrawal or refund. These are the payment records that the law requires us to keep — as sales records, and to answer a withdrawal or refund claim (GDPR Art. 17(3)(b) and (e)) — and we delete them 10 years after the payment. 0xProcessing keeps its own record of each payment. We never receive your wallet’s private keys or seed phrase. 0xProcessing may need to verify identities under anti-money-laundering law and processes that information under its own privacy policy, as an independent controller.
6. How we use your data
- To create and secure your account, verify your email and let you reset your password.
- To run the Service you configure: fetch market data, request AI analysis, apply the risk gate, place and track orders, and show your journal and positions.
- To take payments, activate and extend your access, send receipts and the reminders before your access ends (14 days and 3 days before, and on the day), and resolve underpaid, duplicate or disputed payments and withdrawals.
- To protect the Service and our users: rate limiting, fraud and abuse prevention, security monitoring and incident investigation.
- To send you messages about your account, your subscription and material changes to our terms. We do not send marketing email.
- To comply with our legal obligations, and to establish or defend legal claims.
We do not use your data to train AI models, and we do not make decisions about you that produce legal or similarly significant effects based solely on automated processing. Trading decisions made by your assistant are automated on your instructions, within the limits you set.
7. Legal bases (EEA and UK users)
- Performance of a contract — your account, the trading assistant, the journal, payments, receipts, reminders and other service emails.
- Legitimate interests — security logs, abuse prevention and keeping the Service reliable, balanced against your rights.
- Legal obligation — responses to lawful requests from authorities.
8. Processors and recipients
We share personal data only with service providers that help us run ForecastPro, under contracts that require them to protect it, and with the third parties you instruct us to connect to.
| Recipient | Purpose and data |
|---|---|
| Anthropic, PBC | Provides Claude, the AI model. Each analysis request is sent with your own Anthropic API key and contains market data, news headlines and sentiment, your strategy parameters and your bot-managed positions. We do not send your email address or password. Anthropic processes this under its own commercial terms and privacy policy. |
| Your exchange (Binance) | Receives the order and account requests made with your API keys. Your exchange is an independent controller of your exchange account data under its own terms. |
| 0xProcessing (14partners Limited) | Processes your crypto payment: receives your email address, account ID, order ID, the price and the coin you chose, and sends us the payment status. Independent controller for its own anti-money-laundering checks. |
| Resend | Delivers our emails (verification, password reset, receipts and access reminders). Receives your email address and the content of those emails. |
| Render | Hosts the web application and its database in Frankfurt, Germany (EU). |
| Cloudflare | DNS, TLS, content delivery and network security for the website and the app, and hosting for this website. If bot protection (Turnstile) is turned on for sign-up and sign-in, Cloudflare processes related device and interaction signals. |
| Market-data and news sources | Public market data (Binance’s public data service), CoinGecko, the Fear & Greed index, and the optional sources you connect (CryptoPanic, X, Reddit). Requests contain no personal data about you, apart from the credentials you choose to connect for those sources. |
| Authorities and advisers | Where the law requires it, or to protect rights and safety; and our professional advisers, under confidentiality. |
9. International transfers
Our application and database are hosted in the EU. Some providers process data in other countries — for example Anthropic, Cloudflare and Resend in the United States, and 0xProcessing in the Seychelles. Where the law requires it, we rely on appropriate safeguards for these transfers, such as the European Commission’s Standard Contractual Clauses or an adequacy decision.
10. Cookies and tracking
This marketing website sets no cookies, uses no analytics and loads no third-party scripts, fonts or trackers. The web app sets one strictly necessary cookie, fp_session, to keep you signed in. It is HttpOnly, sent only over HTTPS, and expires after 72 hours or when you log out. Because it is strictly necessary, it does not require consent.
11. Retention
| Data | How long we keep it |
|---|---|
| Account data, settings, encrypted keys, trading journal and security log | As long as your account exists. Deleted when you delete your account. |
| Failed sign-in records (the email address typed and the IP address) | 90 days, then deleted automatically. Deleted earlier if you delete the account for that address. |
| Sessions | Until you log out or they expire (after 72 hours); revoked at once when you change or reset your password or delete your account. Expired sessions are deleted daily. |
| Email verification and password-reset links | Stored only as hashes. Verification links expire after 48 hours and reset links after 1 hour; expired links are deleted daily. |
| Payment records (your orders, their status and the payment notifications 0xProcessing sends us) | As long as your account exists. When you delete your account, the notifications and unpaid orders are deleted; for each order a payment arrived for, a record without your email address is kept for 10 years after the payment (section 5), then deleted. 0xProcessing keeps its own record of each payment under its own privacy policy. |
| Backups | A backup of the database is made daily and kept for 14 days, so data you delete disappears from backups within 14 days. |
| Deleted-account record | When an account is deleted we keep a single entry recording that an account was deleted and when — without the email address or any IP address. |
| Hosting and network logs | Kept by our hosting and network providers under their own retention settings. |
12. Deleting your account
You can delete your account at any time, after confirming your password: from the Account page in the app while your access is active, or — if your access has ended, or you never paid — from the billing page you see after you sign in. You can also email support@forecastspro.com from your account’s email address and we will delete it for you. Deleting your account permanently deletes your account, settings, encrypted API keys, trading journal, payment notifications, sessions and security log — including failed sign-in records typed with your email address — and removes your scheduled analyses. The only exception is the record of each payment you made, without your email address (section 5), plus the anonymous deleted-account record described in section 11; 0xProcessing keeps its own record of each payment, and the receipts we emailed you stay in your mailbox. While a payment of yours is still confirming, deletion waits until it is settled (at most 24 hours), so the payment is not lost.
Deleting your ForecastPro account does not close your exchange or Anthropic accounts and does not cancel orders already resting on your exchange. Manage those, and revoke your API keys, directly with those services. Deleting your account does not entitle you to a refund (see the Terms).
13. Your rights
Depending on where you live, you may have the right to access your personal data, correct it, delete it, restrict or object to its processing, receive it in a portable format, and withdraw consent. To exercise these rights, email support@forecastspro.com from the address on your account; we will respond within the time the law requires, normally within one month. You also have the right to complain to a data protection authority — in the EU or EEA, the authority in the country where you live or work; in the UK, the Information Commissioner’s Office.
14. Security
We protect your data with TLS encryption in transit, Argon2id password hashing, encryption of API keys at rest, hashing of session and email tokens, rate limiting on sign-in, sign-up and password reset, cross-site request protection, strict security headers and a content security policy, and least-privilege access. No system is perfectly secure; if a breach affects your personal data, we will notify you and the authorities as the law requires.
15. Children
ForecastPro is not intended for anyone under 18, and we do not knowingly collect data from children. If you believe a child has created an account, contact us and we will delete it.
16. Changes to this policy
We will publish any changes on this page and update the effective date. If a change is material, we will tell you by email or in the app before it takes effect.
17. Contact
Ahmad Najjar, trading as ForecastPro, 4297 Express Lane, BEY 86776, Sarasota, FL 34249-2602, United States. Email: support@forecastspro.com.