AFX Institute is responsible for the personal data processed on afxinstitut.com and in the app. This policy applies Gabonese Law No. 001/2011 on the protection of personal data, Quebec's Act respecting the protection of personal information in the private sector (as amended by Law 25) and Canada's PIPEDA, the European Union's General Data Protection Regulation (GDPR) and its UK version, as well as the data protection laws of the other countries where our students live.
The person in charge of the protection of personal information is Samy Aoudj, co-founder. You can write to them at contact@afxinstitut.com.
2. Data collected
On registration, AFX Institute collects: your name, your email address, your country of residence, your preferred language and, if you give it, your phone number. Your country is used to adapt the course to your region (examples, currencies, deposit methods); your language is used to display the interface in French or English. If you arrived through the link of a partner, a referrer or one of our posts, that link is attached to your account (see section 5).
Your phone number is optional. The AFX Institute team only calls you or messages you on WhatsApp if you have agreed to it, through a separate, unticked box at registration, and only to help you if you run into difficulty with the course. This consent is time-stamped; you can withdraw it at any time by writing to contact@afxinstitut.com. Without it, your number is never used to contact you. Within the team, only the administration and support roles can see your number, and every view of a record that shows it is written to a log.
3. Learning journey data
To track your progress and support you, AFX Institute records:
Your progress: lessons read and completed, quizzes taken and their scores, dates.
Your activity: log-ins, opening a lesson, starting a quiz and similar actions, to measure and improve the course.
Your aggregated trading statistics (win rate, average risk/reward ratio, number of trades in your journal), to support you during your appointments.
AFX Institute never reviews the detail of your trades, your personal notes or your private communications. This data is reserved for the team, within the scope of your support.
4. Why we use it
Each use rests on a specific basis:
Providing the course (account, progress, quizzes, certificate, emails about your journey): it is the service you ask for when you create your account.
Contacting you by phone or WhatsApp: only with your consent, which you can withdraw at any time.
Measuring visits: with your consent in the European Union, the United Kingdom and Canada; elsewhere, on the basis of our interest in understanding what helps or hinders visitors, with no advertising and no third-party tool.
Security (IP address, log of team actions): to prevent abuse and protect accounts.
Recognising our partners: knowing which link brought you.
Your data is never sold and is never used for advertising.
5. Visit measurement, links and cookies
The Platform uses technical cookies that are essential for logging in (Supabase session), and remembers your language and display theme. No advertising cookie and no third-party analytics tool is used.
Without an account, we measure your visit to improve the training: a random identifier kept in your browser, the pages read, the site or link you came from, your country and city (derived from the connection), the device type, screen size, network type and loading time, your clicks on the sign-up buttons, and, in the sign-up form, the name of the field where you stopped (never what you typed). If you create an account, this journey is attached to it. Without an account, this data is deleted 13 months after your last visit.
In the European Union, the United Kingdom and Canada, this measurement only happens after your consent, asked for by a banner. Your choice is kept for 13 months. You can change it here at any time:
Your IP address is recorded on each measured visit, at sign-up and at each log-in, in a table only the team can read, for one purpose only: security and abuse detection (for example several accounts created to game the referral programme). It is never used for statistics, which keep only the country and the city. It is deleted automatically after 90 days.
Our posts (WhatsApp Channel, Telegram channel, videos, partners) carry short links of the form afxinstitut.com/l/… A click on one of them is counted with your country and device type, without the IP address, to know which post brought you. If you arrive through a marketing partner's link, an anonymous identifier is kept in your browser for 30 days then deleted, or deleted as soon as you sign up; a student's referral link works the same way.
6. Service providers and transfers
A few providers process data on our behalf, on our instructions and for nothing else:
Supabase: the database and accounts (encryption at rest and in transit);
Vercel: website hosting, which derives your country and city from the connection;
Resend: sending emails;
Anthropic: if you write to support, the text of your message may be used to prepare a draft reply, read by a team member before anything is sent; only the subject and text of the message are passed on, never your name, address or number.
Their servers may be located outside your country, notably in the United States and the European Union; these transfers are covered by their contractual data protection commitments.
AFX Institute does not transmit any personal data to its regulated partner broker. Account opening is done directly with the broker: you provide your data to it yourself, under its own privacy policy.
7. Data retention
Your account and your journey: for as long as your account exists.
After a deletion request: erased within 30 days, unless the law requires us to keep it.
Your IP address: 90 days.
The measurement of a visit without an account: 13 months after the last visit.
Your choice about measurement: 13 months.
The identifier of a partner or referral link: 30 days.
8. Your rights
At any time you may: access your data and receive a copy, have it corrected, have it erased (account closure), object to or restrict a use, and withdraw a consent you gave (phone contact, visit measurement). Write to contact@afxinstitut.com: we answer within 30 days.
If our answer does not satisfy you, you can contact the authority of your country: in Gabon, the National Commission for the Protection of Personal Data (CNPDCP); in Quebec, the Commission d'accès à l'information; elsewhere in Canada, the Office of the Privacy Commissioner; in the European Union, your country's authority (in France, the CNIL); in the United Kingdom, the ICO.