Who we are and what this policy covers
FinaQuotes provides market data infrastructure for brokers, prop firms, trading platforms and financial websites. In this policy, "we" and "us" mean FinaQuotes, the operator of finaquotes.com, acting as the controller of the personal data described below.
The policy applies to the public website finaquotes.com, including the public documentation under /docs/, the access request form and the free market widgets served from FinaQuotes servers. Access to the market data feed and to Pro widgets is governed by a separate agreement, which may contain additional data protection terms.
What data we collect
We keep the amount of personal data to the minimum needed to run the website and answer requests. We collect the following categories:
- Access request form: your name, work email, organization and the text of your message. You provide this data yourself when you click "Get access" and submit the form.
- Technical data from requests to the website: IP address, user agent, requested URL, time of the request and response status. This data is recorded in web server logs and by the spam protection of the form.
- Rate limiting data: the IP address is used to count requests and to apply limits on the form and on public API endpoints, which protects the service from abuse.
- Local browser settings: your chosen language and the documentation theme are stored in localStorage in your browser. This data stays on your device and is not sent to us.
Cookies, analytics and tracking
The website does not use tracking cookies, advertising trackers or third-party analytics. We do not build profiles of visitors, and we do not sell or share personal data for advertising.
Our content delivery and security provider may set strictly necessary technical cookies to protect the website from automated attacks. These cookies are not used for tracking or marketing. If we ever introduce analytics, we will update this policy before doing so and, where the law requires it, ask for your consent.
Free widgets on third-party websites
Free widgets are embedded on other websites as an iframe that loads from FinaQuotes servers. When a page with a widget opens, the visitor's browser connects to our servers, and the IP address, user agent and referrer (the address of the page where the widget is placed) are recorded technically in server logs.
We use this data only to deliver the widget, to enforce usage limits and to detect abuse. We do not place tracking cookies in widgets and do not profile the visitors of our clients' websites. The website owner who embeds a widget is responsible for informing their own visitors about third-party content on their pages.
Why we use the data and on what legal basis
We process personal data only for specific purposes, and each purpose relies on a legal basis recognized by applicable data protection law:
- To answer your access request and continue the conversation you started. Basis: your consent, given when you submit the form, and steps taken at your request before entering into a contract.
- To prepare and perform an agreement for access to the data feed or Pro widgets. Basis: performance of a contract.
- To keep the website, the form and the widgets secure and available, to apply rate limits and to prevent spam and abuse. Basis: our legitimate interest in operating a reliable service.
- To comply with legal obligations, such as responding to lawful requests from public authorities. Basis: legal obligation.
How long we keep the data
We keep personal data only as long as it is needed for the purpose for which it was collected:
- Access requests and related correspondence: while the conversation is active and for up to 24 months after the last message, unless the request leads to a contract, in which case the contract terms apply.
- Web server, spam protection and rate limiting logs: up to 30 days, after which they are deleted or rotated out automatically.
- Local browser settings: until you clear them in your browser. We have no access to them.
Who processes data on our behalf
We do not sell personal data. We share it only with service providers that help us run the website, and only to the extent needed for their service:
- An email delivery service that forwards access requests from the form to our team.
- Cloudflare, which acts as the content delivery network and security proxy in front of the website and processes request data such as IP addresses.
- A hosting provider that operates the servers where the website and the widgets run.
International transfers
Our service providers may process data in countries other than the one where you live. Where such transfers take place, we rely on the safeguards offered by the provider, such as standard contractual clauses or an equivalent mechanism recognized by applicable law.
How we protect the data
We use encrypted connections (HTTPS) for the website and the widgets, restrict access to logs and requests to the people who need it, and delete data when the retention period ends. No system is completely secure, but we review our measures as the service evolves.
Your rights
Depending on the law that applies to you, you have the following rights regarding your personal data:
- Access: ask whether we hold data about you and receive a copy.
- Rectification: ask us to correct inaccurate or incomplete data.
- Erasure: ask us to delete your data when we no longer need it or when you withdraw consent.
- Objection and restriction: object to processing based on our legitimate interest, or ask us to limit processing in certain cases.
- Withdrawal of consent: withdraw consent at any time, without affecting processing that took place before.
- Complaint: lodge a complaint with the data protection authority in your country of residence or work.
How to exercise your rights
Send your request through the contact form and describe what you would like us to do. We may ask you to confirm your identity, for example by replying from the email address you used in the original request. We answer requests within the time limits set by applicable law, normally within one month.
Children
The website and the services are intended for businesses and professionals. They are not directed at children, and we do not knowingly collect personal data from anyone under 16. If you believe a child has sent us personal data, contact us and we will delete it.
Changes to this policy
We may update this policy when the website, the services or the law change. The date at the top of the page shows when the policy was last revised. If a change materially affects how we use personal data that we already hold, we will inform the people concerned by reasonable means before the change takes effect.
Contact
For any question about this policy or about your personal data, write to FinaQuotes, the operator of finaquotes.com, through the contact form. We reply within one business day.