We handle the personal and financial data of Forex traders with the same care we apply to client funds — encrypted, segregated by purpose, and disclosed only when law or risk management requires.
Last updated: May 7, 2026
1. Data We Collect
Identity (name, DOB, government ID, photo), contact (email, phone, address), financial (income range, source of funds, trading experience), trading activity (orders, positions, P/L, IP, device fingerprint), and support communications.
2. How We Use Your Data
To open and operate your trading account, route orders to liquidity providers, calculate margin and risk exposure, prevent fraud and market abuse, comply with regulators, and improve our trading platform and AI execution models.
3. KYC, AML & Sanctions Screening
As a FinCEN-registered MSB, we screen clients against OFAC, UN, EU and PEP lists, monitor transactions for suspicious patterns, and file SARs/CTRs as required by the U.S. Bank Secrecy Act. Refusing to provide KYC data means we cannot legally serve you.
4. Sharing With Third Parties
We share data only with: liquidity providers and prime brokers (for order routing), custodian banks (segregated client funds), KYC/AML vendors, payment processors, cloud and analytics providers under DPA, and competent regulators or courts. We do not sell personal data.
5. Security Measures
TLS 1.3 in transit, AES-256 at rest, hardware security modules for trading keys, mandatory 2FA, role-based access, 24/7 SOC monitoring, and quarterly third-party penetration tests aligned with ISO 27001 controls.
6. Cookies & Tracking
We use essential cookies for session and security, and analytics cookies (with consent) to understand platform performance. You can control non-essential cookies via your browser or our consent banner.
7. International Transfers
Servers are hosted in the U.S. and EU. Transfers outside your jurisdiction occur under Standard Contractual Clauses or equivalent safeguards. Trading data is replicated to a disaster-recovery region in real time.
8. Your Rights & Retention
You may request access, correction, portability, or deletion of your data — subject to AML record-keeping rules that require us to retain trading and KYC records for at least five (5) years after account closure. Email privacy@tonee.exchange to exercise your rights.