Privacy Policy

1. Information We Collect

• Account and orders: your email (used to sign in), name and phone number where you provide them, order history, subscription or purchase status, HIXIUS GOLD passing-fee purchases and pass credits, and your license keys and activation tokens.
• Trial information (original HIXIUS): invite code, trial start and expiry dates, signup email, and acceptance of the Terms.
• HIXIUS GOLD service data: your EA login, your MT5 challenge account number, and — from installation onward — trade-monitoring data recorded from your challenge account (orders, positions, results, timestamps, and account status).
• Payments: processed by Stripe. We receive payment status and receipts, never your full card number.
• Support and community: messages you send by email, Telegram, or Discord ticket, and content you post in the Discord community embedded in the dashboard.
• Technical data: log and usage data from the sites and dashboard, and cookies as described in Section 3.

2. How We Use Your Information

• To deliver and activate licenses, validate EA license requests, bind or rebind MetaTrader accounts, prevent unauthorized sharing, and run your dashboard.
• To operate HIXIUS GOLD monitoring: track challenge status, display it on your dashboard, and verify Pass or Refund claims.
• To publish performance proof from HIXIUS-run accounts — see Section 4; customer accounts are never published.
• To provide support through email, Telegram, and Discord.
• To process payments and refunds through Stripe, and to prevent fraud and license abuse.
• To meet legal obligations (tax, accounting).
• To send service emails such as receipts and license or status notifications.
• To send marketing emails — only with your opt-in consent, and every marketing email includes an unsubscribe link. Delivery runs through our email service providers (such as GoHighLevel, Instantly, or Resend).

3. Cookies, Pixels, and Tracking

• Essential cookies keep sign-in and checkout working; they are always on.
• With your consent, we use Google Analytics (traffic measurement) and Meta Pixel (advertising measurement). These load only after you choose “Accept all” in the cookie banner shown on your first visit; choose “Essential only” and they never load.
• You can change your choice by clearing the site’s cookies in your browser, which brings the banner back.
• Stripe may set cookies at checkout for payment security and fraud prevention. The embedded Discord community (WidgetBot) loads third-party content and may set its own cookies.

4. Third-Party Services

• Stripe — payment processing; card data is handled by Stripe under its own privacy policy.
• myfxbook — public performance tracking for HIXIUS’s own proof accounts only. Your customer challenge account is never published on myfxbook or anywhere else: your monitoring data appears only inside your private dashboard and is used for support and guarantee verification.
• Telegram — support direct messages and our public proof channel (HIXIUS-run accounts only).
• Discord / WidgetBot — community access, trial-code requests, support, and the community embedded in your dashboard.
• MetaTrader — runs on your machine; the EA sends monitoring data from your terminal to HIXIUS via WebRequest.
• Infrastructure — Vercel (website hosting), Supabase (database and authentication for the dashboard), Hostinger (hosting services), email service providers (such as GoHighLevel, Instantly, or Resend), Google Analytics and Meta Pixel (consent-based, Section 3).

5. Legal Bases and Your Rights

Where GDPR or similar law applies, we process data on these bases:

• Contract: licenses, the dashboard, monitoring, guarantee verification, support.
• Legal obligation: tax and accounting records.
• Legitimate interests: fraud and abuse prevention, service security.
• Consent: marketing emails and non-essential cookies (Google Analytics, Meta Pixel via the cookie banner).
• You can ask to access, correct, delete, restrict, or export your data, object to certain processing, withdraw consent, and complain to your data-protection authority (in Portugal: CNPD). Contact us per Section 10. Deletion has limits: we must keep invoicing records required by law. Published proof uses HIXIUS-run accounts only, so deleting your data never involves public takedowns.

6. Data Retention

• Account data: kept while your account is active, then deleted or anonymized within 12 months of closure.
• Order, invoice, and tax records: kept as long as the law requires.
• Monitoring and trade records: kept for 24 months to operate the guarantee and the service.
• Support conversations: kept for 24 months.
• Trial and abuse-prevention records may be retained where necessary for fraud prevention and audit.

7. Security

We use encryption in transit, restricted access to customer data, and Stripe for card handling, so card numbers never touch our servers. License keys and EA credentials are stored with access controls. No system is 100% secure — protect your login, email account, MetaTrader terminal, and VPS, and contact us immediately if you suspect an issue.

8. International Processing

HIXIUS operates from Portugal. Our processors (Stripe, Vercel, Supabase, Hostinger, Google, Meta, Discord, Telegram, myfxbook) operate globally, so your data may be processed outside your country, including outside the EEA. Where GDPR applies, transfers rely on safeguards such as adequacy decisions or Standard Contractual Clauses.

9. Children

Our sites and products are for adults. You must be at least 18 to use them. We do not knowingly collect data from children; if you believe we have, contact us and we will delete it.

10. Contact

• Data controller: HIXIUS, operated by its founder (“Mike Lex”) from Portugal, until a company is registered — these pages will be updated with the company’s details when that happens.
• Privacy requests: email support@hixius.com. HIXIUS GOLD customers can also reach us by Telegram DM or Discord ticket from the dashboard. We may need to verify your identity before fulfilling certain requests.