Privacy policy.
This page explains what information the FX GOAT website collects through its forms (when they are offered), what the FX GOAT member dashboard stores for account holders, and how it's used, under South Africa's Protection of Personal Information Act (POPIA).
Who we are
FX GOAT is a trading business based in Dubai, United Arab Emirates, run by Emmanuel and Thapelo. Privacy questions and requests: support@fxgoat.com.
FX GOAT, fxgoat.com and dashboard.fxgoat.com are operated by UniversalSphere FZ-LLC, a Free Zone Limited Liability Company licensed by the Ras Al Khaimah Economic Zone Authority (RAKEZ), United Arab Emirates. Registered address: FOB50133, Compass Building, Al Shohada Road, AL Hamra Industrial Zone-FZ, Ras Al Khaimah, United Arab Emirates.
UniversalSphere FZ-LLC is the responsible party for the personal information described on this page, and applies South Africa's Protection of Personal Information Act 4 of 2013 (POPIA) to it.
RAKEZ commercial licences: E-Commerce 45007085 (Products and Services E-Trading); General Trading 7010199 (General Trading); Services 47017005 (Marketing Management); each issued 21 November 2024 and valid until 20 November 2026. These are UAE commercial licences. They are not financial-services authorisations, and they are separate from the South African representative arrangement described in the Risk disclosure.
What the website forms collect (when offered)
The website's contact and partnership forms are offered only while their email delivery is switched on; otherwise the Contact and Partners pages show the support email address instead, and nothing is collected there. When the contact form is offered, it collects the topic you choose, your name, your email address and your message.
When the partnership form is offered, it collects your name, company, role, work email, the partnership type, your primary region, your message, and your confirmation that we may contact you about the inquiry.
Forms also include a hidden anti-spam field and record when the form was opened, so automated submissions can be filtered out.
How submissions are used
Form submissions, and emails you send us directly, are used to read and respond to your message. Form submissions are sent by email to the FX GOAT team, with your email address set as the reply-to address.
Lawful grounds (POPIA section 11): we answer a contact message because you asked us to, and a partnership inquiry because you confirmed we may contact you about it. We don't add form addresses to any mailing list.
The FX GOAT member dashboard
Creating an account and signing in to the dashboard uses your email address. Sign-in works with one-time codes or links sent to that address, so no password is stored for client accounts. The dashboard also stores the name you give (optional), when you signed in, and a record of changes to your account that you can see on the Activity page.
If you link a broker account, the dashboard stores the broker (Exness or Vantage), the trading account number and the platform (MT4 or MT5) you choose. FX GOAT checks with that broker whether the account is under FX GOAT's partner or introducing-broker relationship, and stores the result, when it was checked and when it will be checked again. FX GOAT never asks for, or stores, your broker password.
Requests you send from the dashboard (for example an FX GOAT ALGO access review, with an optional TradingView username and note) are stored with your account and reviewed by the FX GOAT team, including in a private internal spreadsheet used to process them.
The dashboard sends emails to your address: sign-in codes and, where switched on, service messages about your account, your broker check and your requests. It doesn't send marketing emails, and signing up is not consent to marketing.
The dashboard uses only the cookies needed to keep you signed in and secure. It uses no analytics, advertising or tracking cookies, and loads no third-party scripts.
Lawful grounds (POPIA section 11): we process dashboard information to provide the service you signed up for under the Terms of Service, to keep it secure and prevent abuse (our legitimate interest), and to keep records a law requires. We don't rely on consent for these, and visiting a page is never treated as consent.
The broker check is automated. If you disagree with a result, email support@fxgoat.com and a person will review it. The check confirms only the partner or introducing-broker relationship; identity checks (KYC) are done by your broker, not by FX GOAT.
Abuse prevention
To stop spam and abuse, the site limits how often forms can be submitted. This uses your IP address where the hosting setup provides it reliably, otherwise a one-way hash of your browser's user-agent and language settings, plus a one-way hash of the submitted email address. These values are held in server memory only for the length of the limit window and are not stored in a database.
Service providers and transfers
The member dashboard runs on Render (application hosting) and Supabase (database and sign-in), and sends email through Brevo. Requests sent from the dashboard are also copied to a private Google Sheets spreadsheet used by the FX GOAT team. FX GOAT's own broker-integration server asks Exness and Vantage about linked trading accounts.
The website is hosted by Hostinger. When they are offered, its contact and partnership forms send submissions to the FX GOAT team by email through Brevo.
Some of these providers process information outside South Africa. POPIA section 72 allows that only on its listed grounds: the recipient is bound by a law, binding corporate rules or a binding agreement that gives adequate protection (section 72(1)(a)), you consent (72(1)(b)), or the transfer is necessary to perform the agreement with you (72(1)(c)). FX GOAT relies on each provider's own data-processing terms under 72(1)(a) and, for what is needed to run the service you signed up for, on 72(1)(c). FX GOAT has not separately audited these providers. Each receives only what it needs for its part of the service.
How long we keep it
We keep personal information only as long as we need it for the purpose it was collected for, unless a law requires or allows us to keep it longer (POPIA section 14).
- Form submissions and emails to support: while the enquiry is open and for any follow-up it needs.
- Dashboard account, broker-check and request records: while your account is open, and afterwards only as long as needed to handle a dispute, prevent abuse (for example the same trading account being claimed twice) or meet a legal obligation.
- Deletion and export requests are handled by our team. There is no instant, automated deletion or export.
Your rights
- Ask whether we hold personal information about you, and for a copy of it (POPIA section 23).
- Ask us to correct or delete information that is inaccurate, out of date, excessive or no longer needed (section 24).
- Object to processing we base on our legitimate interests (section 11(3)).
- Withdraw consent where we rely on it, without affecting what was done before.
Marketing: FX GOAT currently sends no marketing emails. Any future electronic direct marketing would be sent only with your consent or on another ground POPIA section 69 permits, and every message would let you opt out.
Send requests to support@fxgoat.com. We may need to confirm your identity before acting on a request.
You can complain to the Information Regulator (South Africa): https://inforegulator.org.za.
Security
The website and dashboard are served only over HTTPS. Client sign-in uses one-time codes instead of stored passwords, FX GOAT admin accounts need a second factor, and database access rules limit each account to its own records. If we become aware of a breach that affects your personal information, we will tell you and the Information Regulator as POPIA section 22 requires.
Embedded YouTube videos
The homepage and the Media page can play FX GOAT's YouTube videos and livestreams on this site. Video thumbnails and titles are fetched by this site's own server, so viewing a page doesn't make your browser contact YouTube.
When you press play, the video loads in an embedded player from YouTube's privacy-enhanced domain (youtube-nocookie.com). From that point, YouTube (Google) processes the playback under its own privacy policy, including any cookies or similar storage it uses inside the player. The player is isolated from this site and can't read your form entries.
Nothing from YouTube loads until you press play.
Other platforms
The site links to YouTube, TikTok, Instagram, Facebook, Telegram, broker onboarding channels and the GTM FX GOAT course site. Those services have their own privacy policies, which apply when you use them.
Changes to this policy
Changes are published on this page with a new effective date. If a change materially affects dashboard account holders, we also tell them by email before it takes effect.