Privacy Policy
Last updated: March 4, 2026
MetaSynx is operated by Harmonic Markets (PTY) LTD ("we", "our", or "us"). This Privacy Policy explains how we collect, use, store, and protect your information when you use our mobile application, bridge application, and related services. We are committed to processing your data in accordance with the Protection of Personal Information Act (POPIA) of South Africa and other applicable data protection laws.
1. Information We Collect
Account Information: When you create an account, we collect your email address and a hashed password (via Firebase Authentication). We do not have access to your plaintext password.
Machine and Terminal Metadata: When you pair a VPS bridge to your account, we store a machine identifier, machine name, and basic terminal information including account number, broker name, and platform type (MT4 or MT5). This is necessary to route data between your bridge and mobile app.
Trading Data: Account balances and open positions are encrypted and relayed through our server in real time to reach your mobile device. Trade history and equity snapshots are stored encrypted on our servers to power your analytics dashboard. This data is never shared with or sold to third parties.
Device Tokens: If you enable push notifications, we store your device's Firebase Cloud Messaging (FCM) token to deliver notifications. This token does not identify you personally.
Usage Data: We may collect anonymous usage statistics and crash reports to improve the app.
2. Information We Do NOT Collect
- Your MT4/MT5 broker login credentials — these never leave your VPS and we have no access to them
- Payment card details — processed securely by Dodo Payments, our payment processor, and never seen or stored by us
- Your location data
3. How We Use Your Information
- To provide and operate the MetaSynx service
- To authenticate your identity and secure your account
- To route trading data between your bridge and mobile app
- To send push notifications for trade alerts and automation events
- To notify you about updates, new features, and service changes
- To provide customer support
- To improve and optimize the application
4. Data Security
All communication between the MetaSynx app, bridge, and relay server is encrypted using TLS (Transport Layer Security). Authentication tokens are signed using Ed25519 cryptography. Bridge credentials are encrypted using Windows DPAPI on your VPS.
We implement rate limiting, IP-based abuse detection, and JWT token revocation to protect against unauthorized access.
5. Data Storage and Retention
Your account information and machine metadata are stored on our servers located in [server location]. We retain your data for as long as your account is active. Trade history and equity snapshots are stored encrypted on our servers to power the analytics dashboard, and are retained for as long as your account is active.
If you delete your account, we will remove your personal data from our servers within 30 days. Anonymized usage statistics may be retained indefinitely.
6. Third-Party Services
We use the following third-party services:
- Firebase (Google) — authentication, push notifications, and crash reporting. Subject to Google's Privacy Policy.
- Apple App Store / Google Play Store — app distribution. Subject to their respective privacy policies.
- Dodo Payments — payment processing, subscription billing, and tax compliance as our merchant of record. Subject to Dodo Payments' Privacy Policy.
We do not sell, trade, or rent your personal information to third parties.
7. Your Rights
In accordance with POPIA and other applicable laws, you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data and account
- Opt out of marketing communications
- Object to the processing of your data
- Lodge a complaint with the Information Regulator of South Africa
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.
8. Children's Privacy
MetaSynx is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children. If we become aware that a child under 18 has provided us with personal data, we will take steps to delete that information.
9. International Data Transfers
Your data may be transferred to and processed on servers outside your country of residence. By using MetaSynx, you consent to such transfers. We ensure that appropriate safeguards are in place to protect your data regardless of where it is processed.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes via email or in-app notification at least 14 days before the changes take effect. The "Last updated" date at the top of this page indicates the most recent revision.
11. Contact Us
If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at:
Harmonic Markets (PTY) LTD
info@metasynx.io