Privacy Policy

• Your name, email address and any billing details you give us
• What you order, when, and what you paid
• The IP addresses you connect from, and server logs
• Anything you send us by email or support ticket

To sell you the service, run it, bill you, and answer you when you write. We do not sell your details to anyone.

• The payment provider you choose, to take the payment
• The datacentre where your server runs
• **[List anything else that touches customer data: your email provider,

analytics, a helpdesk, an accountant.]**

For as long as you have an account, and afterwards for as long as tax or accounting rules require.

[Put the actual number of years for your country here.]

You can ask for a copy of what we hold, ask us to correct it, or ask us to delete it once there is no longer a legal reason to keep it. Write to https://t.me/VYQ_help.

[If you have customers in the EU or UK, the GDPR applies whatever country you are in, and this section needs more than this. Take advice.]

We set a cookie to keep you signed in and to remember an order you started before signing in. Nothing else.

##Long version Version 2.0 · Effective Date: 12 August 2026 · Replaces the version of 1 August 2025 Operated by VYQ (in this policy, “VYQ, MyFXVPS”, “we”, “us”).

This policy explains what we collect, why, who we share it with, and how long we keep it. It forms part of our Terms of Service.

We are the data controller for the information described here. You can reach us at support@fxsvps.com, or by opening a ticket at https://fxsvps.com/submitticket.php. If you need our registered details for a formal legal or regulatory request, ask on a ticket and we will provide them.

The short version: We collect what we need to sell you a server, bill you, keep the platform working, and defend ourselves if a payment is disputed. We do not sell your data to anyone.

Two things are worth knowing up front, because they are the ones people ask about:

We do not read what is on your server. Not your charts, not your account numbers, not your strategies, not your expert advisor code, not your files. Section 5 explains the narrow exceptions. We record your IP address and the time when you accept a policy. That record is how we prove what you agreed to if a charge is ever disputed. Section 4 explains it.

1. What we collect from you

Account details. Name, email address, postal address, phone number, and company name where you give one. Required to open an account and to issue invoices. Payment details. Card details are entered into our payment processor's systems, not ours. We hold the card type, the last four digits, the expiry, and the transaction reference. We never see or store your full card number. For cryptocurrency payments we hold the transaction hash and the amount. For bank transfers we hold what appears on the transfer. Verification documents, where our fraud checks ask for them. Held only until verification is decided, then deleted, unless we are required to keep them. Support correspondence. Tickets, live chat and email, including anything you paste into them. Agreement acceptances. Which policy version you accepted, when, your IP address, your browser, and the order it belonged to. See section 4.

1. What we collect automatically

Client area activity. IP address, browser and device, pages viewed, and login times. Used for security and for spotting account compromise. Fraud signals at checkout. IP address, geolocation of that address, whether it belongs to a VPN, proxy or hosting network, email address reputation, and device characteristics. Used to decide whether to provision immediately, ask for verification, or decline. Server infrastructure data. Uptime, CPU, memory, disk and bandwidth usage, and the times of remote desktop or SSH logins. Collected from the hypervisor and the network, not from inside your operating system. Running trading platform count on Windows plans. As described in our Acceptable Use Policy, we count how many trading platform processes are running, in order to apply your plan's terminal limit. We count them. We do not read them, and we do not look at anything else running on the server. Website analytics and advertising. See section 7.

1. Agreement acceptance records

When you accept a policy, we store the version, a fingerprint of its exact text, the wording of the checkbox you saw, the time, your IP address, your browser, and the related order and invoice.

Why. If a payment is later disputed, this is what we send to the card network to show what you agreed to and when. Without it we could not defend a dispute, and we would have to price that risk into everything. Your access to it. All of it is visible to you under Agreements in your client area, including the full text of each version exactly as it read on the day you accepted it. You can download any record. Legal basis, where the UK or EU GDPR applies: our legitimate interest in establishing and defending legal claims, and performance of our contract with you.

1. What is on your server

Your server's contents are yours. We do not access them as a matter of course, and we have no interest in them. We will access a server only where:

You ask us to, for support. We note what we did on the ticket. It is attacking others or sending spam, and we need to stop it. We do what is necessary to stop the harm. A binding legal order requires it. We tell you unless we are prohibited from doing so. Hardware or hypervisor maintenance requires it, which normally means moving a disk image without reading it. Staff access to production systems is limited to those who need it.

1. Why we process your data

Where the UK or EU GDPR applies, we rely on these legal bases:

Providing and provisioning the service — performance of the contract Billing, invoicing, renewals — performance of the contract Fraud prevention and verification — legitimate interests; legal obligation Abuse handling and network security — legitimate interests Enforcing plan limits — performance of the contract Agreement and dispute records — legitimate interests; legal claims Service emails and renewal reminders — performance of the contract Marketing emails — consent, which you can withdraw Analytics and advertising measurement — consent Tax and accounting records — legal obligation

1. Who we share it with

We do not sell your data. We share it with the following, each of which processes it on our instructions or as a controller in its own right where stated.

Payment processors, being our card payment provider, PayPal, and our cryptocurrency payment provider. They receive your name, email address, billing address and payment details, and act as controllers for their own fraud and compliance purposes. The processor handling a given payment is shown at checkout and on your invoice. Fraud screening providers, which receive your IP address, email address and order details to return a risk score. Infrastructure and datacentre providers in the countries listed in section 8, which host the physical hardware. They do not receive your account details; they host the machines. Cloudflare, which serves our websites and filters attack traffic, and therefore sees the IP addresses of visitors. BunnyCDN, which delivers static website assets. Email delivery providers, which send our service and marketing email and record whether it was delivered. Google, for website analytics and advertising measurement. See section 7. Professional advisers, auditors and authorities, where the law requires it or where we need to establish or defend a legal claim. If we ever sell or reorganise the business, account data transfers with it, on notice to you.

1. Cookies, analytics and advertising

Our website uses cookies. Essential cookies keep you logged in and keep the cart working, and cannot be turned off. Analytics and advertising cookies are set only where you have accepted them, and you can change your choice at any time. You can also control cookies through your browser settings, though the site will not work properly without the essential ones.

Analytics. We use Google Analytics to understand how the site is used. Advertising measurement. Where we advertise, we measure which advertisements lead to orders. To do this we send Google a record that a purchase happened, including the order value and an identifier that links it to the advertisement click. This runs on consent, and declining advertising cookies stops it. No advertising in the client area. The client area sets only essential cookies.

1. Where your data goes

Our servers are located in the country you select when you order. We currently operate hardware in the United Kingdom, the Netherlands, Germany, Singapore and the United States. Our processors operate in their own countries, including the United States.

Where data leaves the UK or the EEA, we rely on the transfer mechanisms our processors put in place, which are ordinarily the Standard Contractual Clauses or an adequacy decision.

You choose the country your own server sits in when you order, and we will not move it to another country without telling you.

1. How long we keep it

Server contents after cancellation or suspension — 14 days, then permanently deleted Account and contact details — while the account is open, then 7 years Invoices, payments, tax records — 7 years, as required by law Agreement acceptance records — 7 years after the account closes Support tickets — 3 years after closure Fraud screening results — 2 years Server usage and uptime metrics — 13 months Verification documents — until verification is decided, then deleted Marketing consent and unsubscribes — until you unsubscribe, plus a suppression record kept indefinitely The seven-year figures exist because chargebacks, tax audits and legal claims can arrive long after an account closes.

Take your data before you cancel. Server contents are gone 14 days after termination and cannot be recovered.

1. Your rights

Where the UK or EU GDPR applies, you have the right to:

Get a copy of the personal data we hold about you. Correct anything inaccurate. Most of it you can edit yourself in the client area. Delete your data, subject to the records we are required to keep, such as invoices and agreement acceptances. Object to or restrict processing based on our legitimate interests. Withdraw consent for marketing or analytics at any time, without affecting what happened before. Receive your data in a portable format. Ask at support@fxsvps.com, marking your ticket or email as a privacy request. We reply within 30 days and we do not charge for a reasonable request. We may ask you to verify your identity first, because handing your data to someone impersonating you would be the greater harm.

If you are unhappy with our answer, you can complain to your data protection authority. In the UK that is the Information Commissioner's Office.

Depending on where you live, you may have similar rights under other laws, and we apply this policy to everyone rather than only to those who can enforce it.

1. Security

Access to production systems is limited and authenticated. Traffic to our websites and client area is encrypted. Payment card data never touches our systems. Passwords are stored hashed and cannot be read by our staff.

No system is perfect. If a breach affects your personal data and creates a real risk to you, we will tell you and the relevant authority within the time the law requires.

Your part. Use a unique password on your account, and keep your server patched. Most compromises we see start on the customer's side, not ours.

1. Third-party links

Our website may contain links to third-party sites, including brokers, software vendors and payment providers. We are not responsible for their privacy practices. Please review their policies before providing information to them.

1. Children

Our services are not for anyone under 18, and we do not knowingly collect data from children.

1. Changes to this policy

We may update this policy. When a new version is published we ask you to confirm it in the client area, and we keep a record of which version you agreed to, when, and from where. You can view all of your agreements at any time under Agreements in your client area.

1. Contact

Privacy questions and data requests: help@vyq.au Everything else: help@vyq.au Abuse reports: help@vyq.au