Privacy Policy

1. Who we are

This policy covers the website crx.live and the CRX web application (together, the "Service"). The Service is operated by CRX Partners, a partnership firm registered in India ("CRX", "we", "us"). The commercial name is CRX (Capital Return X).

CRX sells a software subscription: a dashboard, market scans, alerts, and optional automation that can send order instructions to a third-party venue you already use. We are not a broker, exchange, dealer, fund, money transmitter, or custodian. We do not hold your trading capital. If you connect a venue, balances, orders, and fills stay on that venue.

"You" means the person who visits the site or holds a CRX account. If you use the Service for a company, you confirm you can bind that company. "Personal data" means information that identifies you, such as your name, email, account identifiers, and online identifiers. It does not include data that no longer identifies you. "Processing" means collecting, storing, using, sharing, or deleting that data.

2. Acceptance

By creating an account, connecting a venue, paying for a plan, or continuing to use the Service, you agree to this policy. If you do not agree, do not use CRX. This policy covers data collected through the website and the app. It does not cover information a venue, broker, or payment company collects under its own policy.

3. Changes

We may update this policy. The new version shows a new "Last updated" date on this page. Continued use after that date means you accept the update. If a change materially affects how we use your data, we will also notify you in the app or by email to the address on your account.

4. Personal data we collect

• Account data. Name, email, and a hashed password. We do not store your password in plain text.
• Profile and risk settings. Market choice (crypto or forex), product (such as futures, spot, gold, silver, or FX majors), leverage, margin, position limits, stop-loss, take-profit, partial profit, and notification preferences.
• Venue connection data, only if you connect keys. Trade-only API credentials, encrypted at rest. We reject keys that include withdrawal permission. We also store the venue name and the account, position, order, and balance data the venue returns so the dashboard can show it.
• Software activity. Scan results, signals used by the software, positions the software opened or closed on your instruction, history, and performance figures shown in the app.
• Billing data. Plan, cycle, subscription status, invoices, and payment references from our checkout provider. Checkout pays for software only. We do not store full card numbers. We do not take deposits of trading capital.
• Telegram, only if you link it. A chat identifier so we can send the alerts you turned on.
• Support data. Messages you send to hello@crx.live or the in-app help chat, and the account email those messages relate to.
• Technical data. IP address, browser type, device type, timestamps, and security logs used to keep sessions reliable and to block abuse.

We may use aggregated figures that do not identify you, such as how many accounts use a feature. If we combine those figures with data that identifies you, we treat the result as personal data.

5. How we collect it

• From you. Signup, settings, risk forms, venue key forms, billing checkout, Telegram linking, and email or chat to support.
• From your venue, if you connect one. Balances, positions, orders, and fills needed to run the dashboard and any automation you enable. The venue processes that data under its own terms.
• From the payment provider. Whether a software payment succeeded, failed, or was refunded, and the subscription status. The provider processes card or crypto payment details under its own policy.
• Automatically. When you use the site or app we record technical logs needed to operate login, rate limits, and security.

6. Browser storage

CRX keeps your login session in browser storage on your device so you stay signed in. We also store small preferences, such as onboarding progress and the help-chat position. This storage is required for the app to work. It is not used to sell ads, and we do not let third-party ad networks drop cookies on CRX.

You can clear this storage in your browser. If you do, you will be signed out and some preferences will reset. You can also revoke a session from the sessions list in the app.

7. How we use your data

We use personal data only to run the software:

• Create and secure your account, and let you reset a password
• Show balances, positions, history, and risk settings in the dashboard
• Scan markets and, only after you enable live automation and connect trade-only keys, send order instructions to your venue inside the limits you set
• Send service email, and Telegram alerts you turn on
• Bill the software plan, apply the refund policy, and keep billing records
• Detect abuse, fraud, and unauthorized access, and enforce our Terms
• Answer support requests and improve reliability of the Service

The usual reasons are: performing the software contract with you, our legitimate interest in keeping the Service secure, and a legal duty such as tax or accounting records. We do not use your venue keys or trading history to advertise other people's products.

8. Venue API keys

Keys are encrypted at rest with AES-256-GCM. They are used only to read the account and, if you turn live automation on, to place or cancel orders on that venue. CRX does not request or store withdrawal permission. Disconnecting keys in Settings stops new use of those credentials. Your funds remain in the venue wallet.

9. Who we share data with

We do not sell personal data. We share it only as needed to provide the Service:

• The venue you connect (for example OKX, Binance, Bybit, or your forex broker), so it can authenticate your keys and return account data or accept an order instruction you allowed.
• Payment processors that collect the software fee (such as Paddle, Stripe, or a crypto checkout). They do not receive your trading capital.
• Email delivery for account and billing messages, and Telegram if you link alerts.
• Infrastructure providers that host the app, database, and logs, under instructions to process data only for CRX.
• Authorities when the law requires us to disclose information.

Some of these providers may process data outside India. We share only what that provider needs for the task above.

10. Alerts and messages

Account, security, and billing messages are part of the Service. Telegram and other trading alerts are sent only for the events you enable. You can turn alert channels off in Settings, and you can unlink Telegram. We do not give your email to other companies for their own marketing.

11. Children

CRX is for people who are at least 18. We do not knowingly create accounts for anyone younger. If you believe a child gave us personal data, email hello@crx.live and we will delete that account.

12. Security

Passwords are hashed. Venue keys are encrypted. Access to production data is limited to people who need it to operate the Service. Sessions can be revoked. No online service is perfectly secure. If you think your account or keys were exposed, change your password, disconnect the venue keys, and email hello@crx.live.

13. Your login

Do not share your CRX password or venue API keys with anyone else. You are responsible for activity under your login, including risk settings and keys you connect. If you suspect misuse, contact us and revoke the session.

14. How long we keep data, and deletion

We keep account, settings, and history while the account is open, and for as long after closure as we need for security, billing disputes, refunds, or law. Billing records may be kept for the period tax and accounting rules require.

To delete your account and personal data, email hello@crx.live from the address on the account. We will close the account and delete or anonymize personal data, except records we must keep for the reasons above. Disconnect venue keys and turn off live automation before you write, so no new order instructions are sent while the request is handled. Deleting the CRX account does not close your account at the venue.

15. Your rights

Depending on where you live, including under India's digital personal data rules and, where it applies, the GDPR, you may ask us to:

• Give you a copy of the personal data we hold about you
• Correct data that is wrong or incomplete
• Delete personal data, subject to the retention rules above
• Limit or object to a use that is not required to provide the Service
• Receive data you provided, in a common machine-readable format, where the law requires it
• Withdraw a consent you gave, without affecting processing that was already lawful

Email hello@crx.live from your account address. We aim to answer within one month. We may ask you to confirm you own the account before we act.

16. Complaints

Write to us first at hello@crx.live so we can fix the issue. You may also complain to the data-protection authority where you live or work, if that authority has jurisdiction over CRX Partners.

This policy is governed by the laws of India. Courts in India have jurisdiction, except where a local consumer law gives you a right to bring a claim somewhere else.

17. Contact

Privacy requests and questions: hello@crx.live. You can also use the contact page.