Privacy Policy
Version 2.1.1, 12 October 2026. Effective from the date of publication on eightforex.com.
This Policy explains how PT EIGHT FOREX INVESTAMA ("we", "us") handles personal data on eightforex.com and Eight Forex Journal at journal.eightforex.com, including the web app, the Eight Forex Journal Expert Advisor for MetaTrader 5 (the "EA"), statement import, and public profiles (the "Services").
We process personal data in line with applicable data protection laws, including the EU/UK GDPR and Indonesia's Personal Data Protection Law (UU PDP).
1. Who we are
PT EIGHT FOREX INVESTAMA (NIB 0508260171753), South Jakarta, Indonesia, is the controller of your personal data (full details in Section 16). For all privacy questions, requests, and complaints, email legal@eightforex.com.
2. Data we collect
Website. If you use the contact form or a "Notify me" request: your name (contact form only), email address, message, and the time you consented. We also keep a hashed IP address to prevent abuse, and server logs (IP address, browser, pages, time) for security.
Journal account. Your email address and, if you choose, a display name. One account is allowed per email address. Your password is stored only as a secure hash. We keep records of what you consented to and when.
Sign in with Google (optional). If you choose to sign in with Google, Google sends us your email address, your name and profile picture (if your Google account provides them), and a Google account ID that identifies you to us. We use this data only to create your account and sign you in. We never receive your Google password. Google's use of your data is covered by Google's Privacy Policy: https://policies.google.com/privacy. You can unlink Google at any time in Settings (you will first be asked to set a password, so you can still sign in), or remove our access in your Google Account at https://myaccount.google.com/connections. Unlinking does not delete your Journal account.
Linking accounts with the same email. Only one account is allowed per email address. If you sign in with Google using the same email address as an existing Eight Forex account, and Google confirms that the email address is verified, we link the two sign-in methods into one account. Your journal data, settings, and consents stay the same, and you can then sign in either way. We will email you when this happens. If you did not expect this, or want the sign-in methods separated, email legal@eightforex.com.
Trading data (only if you choose to provide it, with your separate, explicit consent).
- EA data. If you connect a MetaTrader 5 account, the EA sends the following to our server at https://journal.eightforex.com: closed trades (ticket, symbol, direction, volume, open/close time and price, initial stop loss and take profit, profit, commission, swap); deposits and withdrawals; account number, server, broker name, account type, currency and leverage; balance, equity and margin; and your broker's margin call and stop out levels.
- Manual import. You may upload CSV or HTML statements. We keep only the trade data needed and discard the rest. Uploaded files are deleted after processing.
- Notes and settings you add in the Journal.
Usage and security data. Device and browser type, pages visited, and error and security logs.
We do not collect your MetaTrader password, payment card details, or identity documents. We do not offer paid plans. The only third-party sign-in we offer is Sign in with Google (see above).
3. Cookies, analytics and trackers
Our own cookies. We set only two kinds of cookies, both strictly necessary: a login session cookie and a security (CSRF) cookie. Your theme choice, and your choice to load the economic calendar automatically (see below), are saved only in your browser's local storage and are never sent to our server.
We set no analytics, advertising, or tracking cookies of our own. Apart from the economic calendar widget described below, which loads only after you click "Load calendar", we add no third-party analytics or trackers to eightforex.com or journal.eightforex.com. Our fonts are hosted on our own servers. Because the calendar loads only when you ask for it, we do not show a general cookie banner: the "Load calendar" button is where you choose. If anything else changes, we will ask for your consent first.
Economic calendar widget (third party). Our economic calendar page on eightforex.com can show a widget provided by MetaQuotes Ltd (tradays.com). Nothing is loaded from MetaQuotes until you click "Load calendar". Your click is your consent to load the widget. After the click, MetaQuotes receives your IP address, browser data, and the name of our website; sets its own third-party cookies on tradays.com (_fz_uniq and _fz_fvdt, kept for 400 days, and _fz_ssn, kept for 30 minutes) and stores similar data in your browser; and sends usage (analytics) data to its servers. MetaQuotes handles this data under its own privacy policy (https://www.tradays.com/en/privacy). We remember your choice in your browser, so the calendar loads automatically on later visits. To withdraw your consent, click "Don't load automatically" on the calendar page. To remove MetaQuotes' cookies, clear the cookies and site data for tradays.com in your browser settings, or block third-party cookies in your browser. The widget is not loaded on any other page.
4. Why we use your data
We use your data to:
- provide the Services, including your account, sign-in (including Sign in with Google if you choose it), EA sync, import, statistics, export, and service emails (our contract with you; your explicit consent for trading data);
- reply to messages and "Notify me" requests, show a public profile or Leaderboard entry you switch on, load the economic calendar widget when you click "Load calendar", and send optional updates you opt in to, including the weekly summary once it is available (your consent);
- keep the Services secure and improve them using aggregated or de-identified statistics (our legitimate interests); and
- comply with the law (legal obligation).
We do not make decisions about you based solely on automated processing.
Emails we send.
- Service emails. We send emails that are part of the Services, such as EA connection problems, security alerts (for example a new sign-in or password change), and changes to your account or to our terms. We send these to perform our contract with you and for our legitimate interest in keeping your account secure. You cannot switch them off while you have an account, but we keep them to what is needed.
- Weekly summary (coming soon). We plan to offer a weekly email with a summary of your journal. When it launches, it will be opt-in and off by default, and every summary email will have an unsubscribe link. Our legal basis will be your consent, which you can withdraw at any time.
All emails are sent from noreply@eightforex.com through our own mail server at our hosting provider (see Section 9). We do not track email opens or clicks. Replies to noreply@eightforex.com are not read; please contact legal@eightforex.com.
5. What we never do
- We never sell or rent your personal data.
- We never use your data to make trading decisions or to copy or trade against your trades.
- We do not provide trading signals, investment advice, or account management, and we do not refer you to brokers or share your data with brokers.
6. Access by our personnel
Authorised personnel may view Journal account data (such as email, display name, account identifiers, trade history, and statistics) through a restricted admin dashboard.
- Access is read-only: personnel cannot place, change, or close trades or edit your journal.
- Access is used only for operations and troubleshooting, support, security, legal compliance, and aggregated or de-identified statistics.
- Every access is logged (who, when, which account). Access logs are kept for 12 months.
- We do not notify you of each individual access.
- Data viewed this way is never sold and never used for trading decisions.
7. Public profiles
Your journal is private by default. If you switch on a public profile or share link, anyone with the link can see it. A public profile and a Leaderboard entry show only your username or display name, Real/Verified badges, and statistics (growth, win rate, drawdown, number of trades, and account age). Monthly performance and a trade list (symbol, direction, time, and result) are shown only if you choose. Amounts are hidden unless you choose to show them; monthly performance is shown in percent. Account labels, account numbers, broker login details, servers, and email addresses are never shown publicly. You can switch sharing off at any time, but we cannot control copies others have made.
Leaderboard. The Journal Leaderboard is opt-in and open only to live accounts connected through the EA. If you join, the same rules as for public profiles apply: only the items listed above are shown. You can leave the Leaderboard at any time in Settings, and we may remove entries.
8. Where your data is stored
Your data is stored on servers in Indonesia. Encrypted backups are kept on our hosting provider's servers in Indonesia and may also be copied to a cloud storage provider that may store them outside Indonesia. Backups are encrypted before they leave our server, and the storage provider cannot read them.
9. Who we share data with
- Service providers acting only on our instructions: our hosting provider in Indonesia (Rumahweb) and our encrypted backup storage provider. Service emails are sent from noreply@eightforex.com through our own mail server at our hosting provider; we do not use a third-party email delivery service.
- Google, only if you choose Sign in with Google. Google then knows that you use our Services, under Google's own Privacy Policy.
- MetaQuotes Ltd, which receives the data described in Section 3 only after you click "Load calendar" on our economic calendar page.
- People you choose, through a public profile, share link, or the Leaderboard.
- Authorities, when required by law or to protect the rights and safety of users or the public.
- A successor business, in a merger or acquisition, with notice to you.
Otherwise, we share your data only with your consent.
10. How long we keep data
We keep Journal data while your account is active and delete it within 30 days after you delete it, close your account, or withdraw consent, unless the law requires us to keep it. Contact messages are kept for 12 months; backups and logs are deleted on a rolling basis within 30 days.
11. Security and breaches
We use reasonable security measures, including encryption in transit, hashed passwords, revocable EA keys, access logging, and encrypted backups.
If a personal data breach affects you, we will notify you and the competent authority without undue delay and within the time required by law.
12. Your rights
Depending on where you live, you may have the right to access and get a copy of your data, correct it, delete it, receive it in a portable format (portability), object to or restrict certain processing, withdraw consent at any time (without affecting earlier processing), and complain to a data protection supervisory authority.
In the Journal you can export your data, delete your account, revoke EA keys, unlink Google, leave the Leaderboard, and switch off sharing in Settings. For any other request or complaint, email legal@eightforex.com. We may need to verify your identity and will respond within the time required by applicable law.
13. Age
The Services are only for people aged 18 and over. If we learn we hold data of someone under 18, we will delete it.
14. Changes
We will notify Journal users of meaningful changes before they take effect, and ask for new consent where required.
15. Language
These policies are provided in English.
16. Contact
PT EIGHT FOREX INVESTAMA
Gedung Plaza Mutiara Lt. 8, Jl. DR. Ide Anak Agung Gde Agung Kav. E.1.2 No. 1&2, Kuningan Timur, Setiabudi, South Jakarta 12950, Indonesia
NIB 0508260171753
Data protection contact: legal@eightforex.com
All questions, privacy requests, and complaints: by email only.