X4
Sign in Create account
PRIVACY

Privacy Policy.

This policy explains what data X4 collects, why we collect it, where it is stored and how you can control it. We aim to collect only what is needed to run the service.

Last updated: 6 November 2026

1. Who we are

X4 is a signal-only market-analysis platform for Pocket Option, Quotex, Binomo and Expert Option. For privacy requests, contact help@xfour.tech or the administrator on Telegram at support.

2. Data we collect

  • Account data: email address, unique username, password hash, role, broker preference, account status and timestamps.
  • Licence data: plan, licence key, status, issue and expiry dates, device binding and related notes.
  • Payment data: plan, amount, currency, payment method, transaction hash or order ID, review status and administrator notes. Screenshot bytes are sent directly to the configured Telegram payment channel and are not stored by X4.
  • Usage and security data: session tokens (stored as hashes), IP address and user agent where recorded, signal history, application logs, error logs and market candle data.
  • Notification data: platform notices sent to you, read state and clear state.
  • Local device data: a device identifier, broker preference and local alert history stored in your browser.

3. How we use data

  • to create and secure your account, authenticate sessions and enforce licence access;
  • to review payments, activate or extend licences and keep payment records;
  • to operate, debug, secure and improve the signal dashboard and market feeds;
  • to send platform notifications and, where enabled, email notices;
  • to detect abuse, fraud, chargebacks and violations of our Terms & Conditions;
  • to comply with legal, accounting and regulatory obligations.

4. Legal bases

Where data-protection law requires a legal basis, we rely on performance of our contract with you (providing the licensed service), our legitimate interests (security, fraud prevention, service improvement), your consent where we ask for it (for example optional email notifications), and compliance with legal obligations. You can withdraw consent at any time without affecting prior processing.

5. Sharing and processors

We do not sell your personal data. We share limited data with service providers who help us run the platform:

  • Supabase — cloud database mirror used to store platform records when configured;
  • Telegram — payment screenshots, transaction references and limited account details are forwarded to the administrator's configured Telegram chat for manual review. Support messages and attachments are relayed to the configured support group;
  • Broker market feeds — Pocket Option, Quotex, Binomo and Expert Option provide market data. The trader workspace does not receive or store your broker trading credentials;
  • Infrastructure and email providers — hosting, logging and optional transactional email delivery.

These providers process data on our instructions or under their own terms. Some may process data outside your country. Where required, we use appropriate safeguards for international transfers.

6. Cookies and local storage

We use a secure session cookie to keep you signed in. We also use browser local storage for a device identifier, broker preference, alert history and notification state. You can clear these through your browser, but doing so may sign you out or reset local preferences. We do not use advertising cookies or third-party behavioural tracking on the dashboard.

7. Retention

  • Signal history, application logs and candle data are retained for approximately 24 hours and then permanently purged.
  • Local alert history is cleared on logout, licence expiry or when access is locked.
  • Account, licence and payment records are kept while your account is active and for a reasonable period afterwards to meet accounting, tax, fraud-prevention and dispute-resolution needs.
  • Payment screenshots are not retained by X4 after relay. Payment transaction references and review records are kept only as long as needed to verify and audit a payment, unless a longer period is required by law.
  • We may retain aggregated or de-identified information that cannot reasonably identify you.

8. Security

Passwords are stored as salted hashes, session tokens are stored as hashes, and access to administrative functions is restricted. Telegram bot configuration is stored in the access-restricted platform settings table and is never returned to the browser. Payment proof image bytes are handled in memory for Telegram delivery, not saved to server disk or Supabase. We use reasonable technical and organisational measures to protect data, but no method of transmission or storage is completely secure. You are responsible for keeping your password confidential and for signing out on shared devices.

9. Your rights

Depending on your location, you may have the right to access, correct, delete, restrict or object to processing of your personal data, to receive a portable copy, and to withdraw consent. To exercise a right, contact the administrator on Telegram. We may need to verify your identity. You also have the right to complain to your local data-protection authority.

10. Children

The service is not intended for children or anyone below the age at which they can legally enter into a contract in their jurisdiction. We do not knowingly collect personal data from children. If you believe a child has provided data, contact us so we can remove it.

11. Changes to this policy

We may update this policy to reflect changes to the service, providers or law. The “last updated” date at the top will change. Material changes will be highlighted on the platform where appropriate. Continued use after an update means you accept the revised policy.

12. Contact

Privacy questions and requests: support. Please include the email address or username associated with your account so we can locate it.