Compound FX
Privacy notice
Last updated: 3 September 2026
Who operates the service
Compound FX is operated by Conner Archer trading as Compound FX.
Information processed
We process account identity, preferences, trading-account labels, imported executions, reconstructed trades, journal notes, reviews, customer-authored trading plans, setup playbooks, private images, account objectives, import mappings, support messages and essential technical/security logs. Do not provide broker passwords, card details or unnecessary identity documents.
Why it is used
Information is used to provide and secure the trading decision system, calculate requested analytics and reports, compare customer-recorded plans with supplied execution evidence, prevent duplicate imports, support customers, administer subscriptions, investigate faults and meet legal obligations. Customer trading records are not sold and are not used to train models without explicit consent.
Providers and transfers
The service uses Sites for hosting and private file storage, Supabase for authentication, Stripe for subscription billing and Resend for transactional service emails. Stripe collects payment details directly; Compound FX does not ask customers to enter card numbers into the journal. With consent, Meta analytics measures public-page visits, walkthrough interactions, checkout selections and verified trial starts. Compound FX does not send raw Stripe identifiers or private journal content to Meta. Meta may process online identifiers such as IP address, browser or device data and cookies, plus a pseudonymous event identifier generated from a verified trial checkout.
Cookies and analytics choices
Essential browser storage remembers your privacy choice and supports secure product operation. Optional Meta analytics is disabled unless you accept it. You can withdraw or change that choice at any time; rejecting after acceptance asks Meta to revoke consent, stops future optional events from this site and removes the first-party Meta cookies available to Compound FX.
Anonymous website statistics
We also collect anonymous daily totals of public trial-link clicks, checkout-button requests and successful checkout-link handoffs to identify friction in using the website. These send only an allowlisted action name, with the same opt-out and retention rules. No subscription plan, checkout URL, payment information or customer identity is sent. A handoff is not evidence of a completed trial or payment.
We count views of the homepage, Interactive Lab and contact page solely to understand and improve this website. This separate measurement starts without advertising consent, with a free opt-out through the privacy preferences above. Selecting “Reject all analytics” stops future statistics requests. Previous analytics rejections are respected unless you choose website statistics again.
After a public page is visible for one second, it sends only its allowlisted page path. We immediately add this to a daily UTC total; we do not retain individual view records, IP addresses, visitor IDs, referrers, query strings or advertising identifiers in this statistics dataset. Request headers are screened transiently for known automated traffic. Hosting and security logs are separate. Repeat visits can count again; these are not unique-person counts.
These aggregate statistics are not sent to Meta or linked to accounts, trials or advertising campaigns. We use the UK statistical-purposes exception for service-improvement measurement; optional Meta advertising measurement still requires your consent. Totals older than 90 days are removed on the next statistics collection request. Previously aggregated views cannot be linked back to you for deletion. A device-local preference remembers your opt-out.
Retention and rights
Customers can download a complete JSON export and delete private Compound FX journal records from the account area after subscription access has ended. The Supabase login identity and limited billing, fraud-prevention or legal records may require separate retention; contact support to request full identity erasure. Applicable rights may include access, correction, erasure, restriction, objection and portability.
Private recovery snapshots normally cover the last seven days. If a newer capture fails, the last complete snapshot is retained until it can be replaced. Deleted records may remain in these restricted recovery copies during that period. Unfinished CSV staging expires after seven days; completed or cancelled staging is removed by the next maintenance check.
Security
Customer records and private setup images are isolated by server-side ownership checks. No internet service can promise absolute security; suspected issues should be reported through the private support form.