1. Scope and who is responsible
This Privacy Policy applies to personal data processed through the website at xfiv.com (the "Website") and through direct correspondence with XFIV. The controller of that personal data is FIKO AI LABS LTD ("XFIV", "we", "us"), a company registered in England and Wales under company number 16502068, with its registered office at 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom. As controller, we decide why and how the data is processed.
This policy is written to meet the transparency requirements of the EU General Data Protection Regulation (GDPR) and the UK GDPR, and to give clear information to readers in other jurisdictions, including the United Arab Emirates under the Personal Data Protection Law (PDPL). Where local law gives you additional rights, those rights apply.
2. Personal data we collect
The Website is an information site. It has no user accounts, no analytics tools and no advertising trackers. The Website has a demo request form. Data you submit is used to reply to your request and discuss our products. The personal data we process is limited to the following:
| Category | What it includes | Source |
|---|---|---|
| Technical log data | IP address, date and time of the request, page requested, browser and device type (user agent), referring page and response status. | Created automatically by our hosting and content delivery providers when your browser requests a page. |
| Demo request data | Your full name, work email, company, role and country; your phone or WhatsApp number if you give one, and how you prefer to be contacted (email, WhatsApp, phone call or online meeting); whether you run your own MT5 server; the products you are interested in; your approximate number of active clients; your message; whether you asked for a demo or early access and any plan you selected; and your confirmation that we may use these details to reply. Your IP address is also used briefly to limit repeated submissions and spam. | Provided by you when you submit the demo request form at /book-demo. |
| Correspondence | Your name, email address, organization, job title and the content of any message you send us, plus any attachments. | Provided by you when you email us. |
We do not intentionally collect special categories of personal data (such as health data) through the Website. Please do not send us such information.
3. Why we use personal data and our legal bases
| Purpose | Data used | Legal basis (GDPR / UK GDPR) |
|---|---|---|
| Delivering the Website to your browser and keeping it working | Technical log data | Legitimate interests: operating a functioning website. |
| Protecting the Website against abuse, attacks and fraud, and diagnosing errors | Technical log data | Legitimate interests: keeping our systems and visitors secure. |
| Replying to your enquiries and discussing our products with you | Correspondence | Legitimate interests: responding to business enquiries; or steps taken at your request before entering into a contract. |
| Replying to your demo or early access request, arranging a call and discussing our products with you | Demo request data | Legitimate interests: responding to business enquiries; or steps taken at your request before entering into a contract. |
| Protecting the demo request form against spam and abuse | Demo request data (IP address) | Legitimate interests: keeping our systems and visitors secure. |
| Complying with legal obligations and establishing or defending legal claims | Any of the above, as needed | Legal obligation; legitimate interests. |
Where we rely on legitimate interests, we have considered your rights and expectations and concluded that the processing is proportionate. You can object to it at any time (see section 10).
We do not sell personal data, use it for automated decision-making that has legal or similarly significant effects on you, or use it to profile you for advertising.
4. Marketing communications
The Website does not currently offer newsletter or marketing sign-ups, and submitting the demo request form does not subscribe you to marketing emails. If we introduce them, we will ask for any consent that the law requires and update this policy first. You will always be able to unsubscribe.
5. XFIV products, the AI assistant and MCP
Our products, including XFIV Portal with its built-in AI agent and XFIV Connect with Model Context Protocol (MCP) access, process data about brokers’ clients and their trading accounts. That processing is not covered by this policy.
- In most cases the broker using XFIV is the controller of its clients’ personal data, and XFIV acts as a processor on the broker’s instructions.
- The terms of that processing are set out in the customer agreement and data processing agreement (DPA) between XFIV and the broker.
- If you are a client of a broker that uses XFIV, please read your broker’s privacy notice and contact your broker first about your personal data. We will support the broker in responding to your request.
7. International transfers
Our providers may process personal data in countries other than the one you are in, including countries that may not offer the same level of data protection. When personal data from the EEA, the UK or another jurisdiction with transfer rules is transferred, we rely on an appropriate safeguard, such as an adequacy decision, the European Commission’s Standard Contractual Clauses, the UK International Data Transfer Addendum, or another mechanism permitted by applicable law. You can contact us for more information about these safeguards.
8. How long we keep personal data
- Technical log data is kept for a limited period for security and troubleshooting, in line with our hosting providers’ log retention settings, and then deleted or anonymized, unless we need it longer to investigate a specific security incident.
- Correspondence is kept for as long as needed to deal with your enquiry and any resulting business relationship, and afterwards for as long as required by law or reasonably needed to establish or defend legal claims.
- Demo request data is kept for up to 24 months after our last contact with you, unless a contract follows. If a contract follows, it is kept for as long as needed for that business relationship and afterwards for as long as required by law or reasonably needed to establish or defend legal claims. You can ask us to delete it sooner (see section 10).
9. Security
We use appropriate technical and organizational measures to protect personal data, including encryption of data in transit and access controls. We rely on the security features of our hosting and infrastructure providers. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
More information about how we approach security is available on our Security page at /security.
10. Your rights
Depending on where you are and the law that applies, you may have the right to:
- access the personal data we hold about you and receive a copy;
- ask us to correct inaccurate or incomplete data;
- ask us to delete your data;
- ask us to restrict how we use your data;
- object to processing based on our legitimate interests;
- receive your data in a portable format, where applicable;
- withdraw consent at any time, where we rely on consent;
- lodge a complaint with a data protection supervisory authority, for example in the country where you live or work.
To exercise a right, email privacy@xfiv.com. We may need to verify your identity before acting on a request. We will respond within the time required by applicable law, usually one month. These rights are subject to legal exceptions.
11. Children
The Website is intended for businesses and is not directed at children. We do not knowingly collect personal data from anyone under 18. If you believe a child has sent us personal data, please contact us so we can delete it.
12. Changes to this policy
We will update this policy when our practices change, for example before we add analytics, new forms or new service providers to the Website. The "Updated" date on this page shows when it last changed. If a change is significant, we will take reasonable steps to make it clear.
13. Contact
For questions about this policy or your personal data, email privacy@xfiv.com.