Privacy Policy
Last Updated: April 2026
1. Our Commitment to B2B Privacy
FXNode Cloud operates as an enterprise infrastructure provider. We collect only the absolute minimum amount of data required to secure your API access, provision your Managed MT5 Cloud Instances, and process your wholesale capacity requests. We do not sell, rent, or monetize your corporate data.
2. Information We Collect
To provide our services, we collect the following operational data:
- Corporate Identity: Company name, role, and corporate email addresses used for dashboard access and lifecycle notifications.
- Security Whitelists (IP Addresses): To protect your infrastructure, we store the specific IPv4 addresses you explicitly authorize to connect to our Headless API.
- System Metadata: Hardware utilization metrics, deployment timestamps, and API rate-limiting data necessary to maintain service stability.
3. Third-Party Payment Processing
FXNode operates on a strict cryptocurrency billing model. We do not collect, process, or store any sensitive financial information or raw payment data on our servers.
All enterprise wallet top-ups and crypto checkouts are delegated entirely to our secure third-party payment gateway (NOWPayments). We only store internal ledger receipts (e.g., "Deployed 5x MT5 Instances") to maintain your wallet balance.
4. Data Retention & The 45-Day Purge
We believe in strict data minimization regarding your trading infrastructure.
- Active Instances: Data hosted on your MT5 instances is isolated at the hypervisor level. We do not inspect or analyze your trading algorithms, Expert Advisors (EAs), or historical trade executions.
- Suspended Instances: If an instance expires due to insufficient wallet funds, it is suspended. Exactly forty-five (45) days after suspension, an automated background process permanently and irreversibly destroys the instance and all associated files from our physical host nodes.
5. Enterprise Security Measures
We employ industry-standard cryptographic techniques to secure your data in transit and at rest:
- API Gatekeepers: All programmatic requests are validated against strict IP whitelists and hashed API keys.
- Session Management: Dashboard access is secured using cryptographically signed JSON Web Tokens (JWT) stored in HTTP-only, secure cookies, rendering them inaccessible to client-side scripts.
- Database Encryption: Sensitive operational variables are hashed and encrypted within our core database.
6. Communications
We utilize third-party email routing infrastructure to deliver critical operational alerts, such as server deployment credentials, wallet balance warnings, and API key rotations. By using FXNode, you consent to receiving these necessary transactional communications.