Privacy Policy

This policy explains what personal data Synflow (“Synflow”, “we”, “us”) collects when you visit our website, buy the mentorship, or take part in our community, why we collect it, who we share it with, and what control you have over it. It applies to the website and to the paid program.

We do not need — and will never ask for — your brokerage login credentials, API keys with trading permissions, bank passwords, or account numbers. We do not place trades for you and we do not access your trading account. Treat any request that appears to come from us asking for these as fraudulent and report it.

Where the UK GDPR or EU GDPR applies, we rely on: performance of a contract (delivering the program you paid for); legitimate interests (securing and improving the Service, preventing fraud); consent (marketing email, non-essential cookies — withdrawable at any time); and legal obligation (tax and accounting records).

We do not sell your personal data, and we do not share it for cross-context behavioural advertising. We share only what is needed, with providers who process it on our behalf:

Our providers may process data in countries outside your own, including the United States. Where data leaves the UK or EEA, we rely on appropriate safeguards such as the provider's standard contractual clauses or an approved adequacy mechanism.

Account and access data: for as long as you have access, then up to two years afterwards. Transaction records: for the period tax and accounting law requires, typically six to seven years. Community posts: until you or we delete them, or the platform's own retention applies. Analytics: in aggregated form, up to 26 months. Support messages: up to two years.

We use essential cookies to make the site work and, where applicable, analytics cookies to understand traffic. You can block or delete cookies in your browser; essential cookies are required for the site to function. We honour Global Privacy Control and “Do Not Track” signals where our providers support them.

We use HTTPS, reputable providers, access controls, and the principle of least privilege. No system is perfectly secure, and we cannot guarantee absolute security, but we will notify you and any relevant regulator of a breach affecting your data where the law requires it.

Depending on where you live, you may have the right to access a copy of your data, correct it, delete it, restrict or object to processing, withdraw consent, receive it in a portable format, and — under US state laws such as the CCPA/CPRA — to know what is collected, to delete it, to correct it, and to opt out of sale or sharing (we do neither).

To exercise any right, email us at [SUPPORT EMAIL]. We will verify your identity and respond within the statutory period, normally one month. We will not discriminate against you for exercising these rights. Deleting your data may end your access to the program, and doing so does not entitle you to a refund.

If you are in the UK or EEA and are unhappy with our response, you may complain to your data protection authority.

The Service is for adults aged 18 and over. We do not knowingly collect data from children. If you believe a minor has given us data, contact us and we will delete it.

We may update this policy as the program or the law changes. The effective date above shows the current version, and material changes will be posted here before they take effect.