Your data, handled with care

What we collect

• Your account details: email address and display name (and optionally your company name).
• The information you enter into the app: businesses, FX exposures, invoices, suppliers, and hedging plans.
• Basic usage information needed to run the service (e.g. sign-in events, errors).

We do not ask for, and do not store, your bank credentials or card numbers.

How it is stored

Your data is stored in our managed Supabase database with row-level security enabled on every table that holds client data. In plain English: each client only sees their own businesses, exposures and hedging plans. Connections to the app and to the database are encrypted in transit (HTTPS/TLS).

How we use it

We process your data to provide the service: running the calculator, saving your exposures, generating reports and showing trends over time. We also sync your contact details (and a high-level note that you are a user) to our CRM, HubSpot, so our team can manage your account and communicate with you about the service. We do not sell your data and we do not share it with third parties for advertising.

Cookies

We only use essential cookies and similar local storage needed to keep you signed in and to remember your preferences. No advertising or cross-site tracking cookies.

Data retention

We keep your account and the data you enter for as long as your account is active. If you ask us to delete your account, we will remove your personal data and the exposures linked to it from our active systems within 30 days, except where we are required to retain limited records for legal or accounting reasons.

Your rights

You can ask us to:

• Access the personal data we hold about you.
• Export your data in a portable format.
• Correct anything that is wrong.
• Delete your account and the associated data.

To make a request, email us at support@blkfx.co.uk from the address on your account. We aim to respond within 30 days.

Security practices

• Row-level security on all client data tables.
• Email confirmation required before a new account can sign in.
• Leaked-password protection (passwords are checked against the Have I Been Pwned database).
• Minimum password length of 8 characters.
• Optional Google sign-in and magic-link sign-in.

Contact

Questions about privacy, security or your data? support@blkfx.co.uk