Privacy Policy
1. Who is responsible for your data
The data controller is Viktor Taran, a private individual based in Ukraine, operating the content and education brand Evelyn FX and the website evelynfx.com.
Contact for any privacy matter: hello@evelynfx.com. Full postal details are available to a competent supervisory authority on request.
2. What this policy covers
This policy covers the website evelynfx.com, our official accounts and channels on Instagram, Threads, TikTok, YouTube and Telegram, and the developer integrations we operate with those platforms' APIs.
3. Data collected on this website
This website is a static informational site. It contains no analytics, no advertising pixels, no tracking scripts and no cookies set by us. We do not run contact forms or user accounts on this site.
Our hosting provider, Cloudflare, Inc., processes standard technical request data (IP address, user agent, requested URL, timestamp) as part of delivering and protecting the site. This is necessary for the security and operation of the service and is handled under Cloudflare's own terms as our processor.
4. Data we receive through platform APIs
We use the official developer platforms of TikTok, Meta (Instagram and Threads) and Google (YouTube) to publish and manage our own accounts. Through these integrations we access:
- basic profile information of our own accounts (account name, ID, avatar);
- access tokens issued to us for our own accounts;
- our own published content and its performance metrics (views, likes, comments, reach);
- public comments and mentions left on our own content, so that we can reply to them.
We do not act on behalf of other users, do not request access to other people's accounts, do not build profiles of platform users, and do not sell or share platform data with anyone.
Data of people who interact with us
If you comment on our posts or send us a direct message, we see the information the platform shows us: your public username, your message, and its timestamp. We use it only to reply to you and to moderate our own channels. We do not export it into marketing databases and we do not sell it.
5. Telegram channels and paid subscriptions
If you join one of our Telegram channels, Telegram provides us with your Telegram user ID and public username as the channel operator. If you purchase a paid subscription, we additionally store the subscription status, start and end dates, and the payment identifier returned by the payment provider, so that access can be granted and renewed.
We never receive or store your card number, bank credentials or wallet keys — payments are processed entirely by the payment provider.
6. Why we process data and on what legal basis
- To operate and publish our content — legitimate interest in running our own channels.
- To reply to you when you contact us — legitimate interest, or performance of a contract if you are a subscriber.
- To provide paid subscriptions — performance of a contract.
- To keep the site secure — legitimate interest in preventing abuse.
- To comply with law — where a legal obligation applies.
7. How long we keep data
- Access tokens for our own accounts — until they expire or are revoked.
- Content performance metrics of our own accounts — up to 24 months.
- Correspondence (email, direct messages) — up to 24 months after the last message.
- Subscription records — for the duration of the subscription plus the period required by applicable accounting and tax rules.
8. Who we share data with
We do not sell personal data. We use a small number of service providers that process data strictly on our behalf: Cloudflare, Inc. (hosting, DNS, email routing), the social platforms listed above (publishing and messaging), Telegram (channel and bot delivery), our payment provider (subscription payments), and our cloud database provider (storage of our operational records). Data may be transferred outside Ukraine or the EEA; where that happens, we rely on the providers' standard contractual clauses or equivalent safeguards.
9. Your rights
Subject to applicable law, you may request access to your data, correction, deletion, restriction of processing, objection to processing, and data portability. You may also withdraw consent at any time where processing is based on consent, and lodge a complaint with your local data protection authority.
To exercise any of these rights, write to hello@evelynfx.com. We respond within 30 days. Instructions specific to data obtained through Meta, TikTok or Google platforms are on our Data Deletion page.
10. Children
Our content is intended for adults. We do not knowingly collect data from anyone under 18 years of age. If you believe a minor has provided us with data, contact us and we will delete it.
11. Security
Access tokens and operational records are stored in access-controlled systems, secrets are kept outside of public code, and access is limited to the operator. No method of transmission or storage is completely secure; we cannot guarantee absolute security.
12. Changes to this policy
We may update this policy as our integrations change. The current version is always published on this page with the “Last updated” date at the top. Material changes will be announced on our channels.
13. Contact
Viktor Taran (Evelyn FX), Ukraine — hello@evelynfx.com