Privacy Policy
Version 2.0, 12 October 2026. Effective from the date of publication on eightforex.com.
This Policy explains how PT EIGHT FOREX INVESTAMA ("we", "us") handles personal data on eightforex.com and Eight Forex Journal at journal.eightforex.com, including the web app, the Eight Forex Journal Expert Advisor for MetaTrader 5 (the "EA"), statement import, and public profiles (the "Services").
We process personal data in line with applicable data protection laws, including the EU/UK GDPR and Indonesia's Personal Data Protection Law (UU PDP).
1. Who we are
PT EIGHT FOREX INVESTAMA (NIB 0508260171753), South Jakarta, Indonesia, is the controller of your personal data (full details in Section 16). For all privacy questions, requests, and complaints, email legal@eightforex.com.
2. Data we collect
Website. If you use the contact form or a "Notify me" request: your name (contact form only), email address, message, and the time you consented. We also keep a hashed IP address to prevent abuse, and server logs (IP address, browser, pages, time) for security.
Journal account. Your email address and, if you choose, a display name. One account is allowed per email address. Your password is stored only as a secure hash. We keep records of what you consented to and when.
Trading data (only if you choose to provide it, with your separate, explicit consent).
- EA data. If you connect a MetaTrader 5 account, the EA sends the following to our server at https://journal.eightforex.com: closed trades (ticket, symbol, direction, volume, open/close time and price, initial stop loss and take profit, profit, commission, swap); deposits and withdrawals; account number, server, broker name, account type, currency and leverage; balance, equity and margin; and your broker's margin call and stop out levels.
- Manual import. You may upload CSV or HTML statements. We keep only the trade data needed and discard the rest. Uploaded files are deleted after processing.
- Notes and settings you add in the Journal.
Usage and security data. Device and browser type, pages visited, and error and security logs.
We do not collect your MetaTrader password, payment card details, or identity documents. We do not offer paid plans and do not offer sign-in with Google or any other third-party account.
3. Cookies, analytics and trackers
We use only two kinds of cookies, both strictly necessary: a login session cookie and a security (CSRF) cookie. Your theme choice is saved only in your browser's local storage.
We use no analytics, advertising, or tracking cookies, and no third-party analytics or trackers on eightforex.com or journal.eightforex.com. Our fonts are hosted on our own servers. Because we use no tracking cookies, we do not show a cookie banner. If this changes, we will ask for your consent first.
4. Why we use your data
We use your data to:
- provide the Services, including your account, EA sync, import, statistics, export, and service emails (our contract with you; your explicit consent for trading data);
- reply to messages and "Notify me" requests, show a public profile you switch on, and send optional updates you opt in to (your consent);
- keep the Services secure and improve them using aggregated or de-identified statistics (our legitimate interests); and
- comply with the law (legal obligation).
We do not make decisions about you based solely on automated processing.
5. What we never do
- We never sell or rent your personal data.
- We never use your data to make trading decisions or to copy or trade against your trades.
- We do not provide trading signals, investment advice, or account management, and we do not refer you to brokers or share your data with brokers.
6. Access by our personnel
Authorised personnel may view Journal account data (such as email, display name, account identifiers, trade history, and statistics) through a restricted admin dashboard.
- Access is read-only: personnel cannot place, change, or close trades or edit your journal.
- Access is used only for operations and troubleshooting, support, security, legal compliance, and aggregated or de-identified statistics.
- Every access is logged (who, when, which account). Access logs are kept for 12 months.
- We do not notify you of each individual access.
- Data viewed this way is never sold and never used for trading decisions.
7. Public profiles
Your journal is private by default. If you switch on a public profile or share link, anyone with the link can see what you choose to show. Account numbers, broker login details, and your email address are never shown. Balances and currency amounts are hidden by default and shown only if you choose. You can switch sharing off at any time, but we cannot control copies others have made.
8. Where your data is stored
Your data is stored on servers in Indonesia. Encrypted backups are kept on our hosting provider's servers in Indonesia and may also be copied to a cloud storage provider that may store them outside Indonesia. Backups are encrypted before they leave our server, and the storage provider cannot read them.
9. Who we share data with
- Service providers acting only on our instructions: our hosting provider in Indonesia (Rumahweb) and our encrypted backup storage provider. Service emails are sent from noreply@eightforex.com through our own mail server at our hosting provider; we do not use a third-party email delivery service.
- People you choose, through a public profile or share link.
- Authorities, when required by law or to protect the rights and safety of users or the public.
- A successor business, in a merger or acquisition, with notice to you.
Otherwise, we share your data only with your consent.
10. How long we keep data
We keep Journal data while your account is active and delete it within 30 days after you delete it, close your account, or withdraw consent, unless the law requires us to keep it. Contact messages are kept for 12 months; backups and logs are deleted on a rolling basis within 30 days.
11. Security and breaches
We use reasonable security measures, including encryption in transit, hashed passwords, revocable EA keys, access logging, and encrypted backups.
If a personal data breach affects you, we will notify you and the competent authority without undue delay and within the time required by law.
12. Your rights
Depending on where you live, you may have the right to access and get a copy of your data, correct it, delete it, receive it in a portable format (portability), object to or restrict certain processing, withdraw consent at any time (without affecting earlier processing), and complain to a data protection supervisory authority.
In the Journal you can export your data, delete your account, revoke EA keys, and switch off sharing in Settings. For any other request or complaint, email legal@eightforex.com. We may need to verify your identity and will respond within the time required by applicable law.
13. Age
The Services are only for people aged 18 and over. If we learn we hold data of someone under 18, we will delete it.
14. Changes
We will notify Journal users of meaningful changes before they take effect, and ask for new consent where required.
15. Language
This Policy is provided in English and in Bahasa Indonesia. If there is any inconsistency, the English version prevails.
16. Contact
PT EIGHT FOREX INVESTAMA
Gedung Plaza Mutiara Lt. 8, Jl. DR. Ide Anak Agung Gde Agung Kav. E.1.2 No. 1&2, Kuningan Timur, Setiabudi, South Jakarta 12950, Indonesia
NIB 0508260171753
Data protection contact: legal@eightforex.com
All questions, privacy requests, and complaints: by email only.