Privacy Notice

1. Who we are

Market Leap Partners Inc., based in Japan, operates Currency Grid (the "Service"). We act as the data controller for personal data collected through the Service. Contact: info@marketleappartners.com.

2. Data we collect

• Account data: name, email address, login credentials.
• Support data: messages you send us.
• Usage and telemetry: pages viewed, features used, error logs.
• Device data: browser type, operating system, IP address.
• Saved content: grids and settings you save to your account (Pro tier).

Payment data (card number, billing address) is collected and processed directly by Paddle and is not stored on our servers.

3. Why we use your data

• Account creation and login — to identify you (legal basis: contract).
• Providing the Service — to deliver features you use (contract).
• Customer support — to respond to your inquiries (legitimate interests).
• Security and fraud prevention — to protect the Service (legitimate interests).
• Product improvement — to fix bugs and prioritize features (legitimate interests).
• Marketing — only if you opt in (consent).
• Legal compliance — when required by law (legal obligation).

4. Who we share data with

• Service providers / subprocessors — hosting, database, analytics, and email infrastructure.
• Paddle.com Market Limited — our Merchant of Record. Paddle handles payments, subscription management, tax compliance, invoicing, and customer service related to orders.
• Professional advisers — legal and accounting where necessary.
• Authorities — where required by law or to protect rights.

5. International transfers

We and our subprocessors may process data outside Japan, including in the United States and the European Economic Area. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses or recognized adequacy decisions.

6. Retention

We keep account data for as long as your account is active. Inactive accounts and associated data are deleted or anonymized after 24 months. Billing records may be retained longer where required by tax or accounting law.

7. Your rights

Depending on your jurisdiction (including Japan's APPI and, where applicable, the EU GDPR / UK GDPR), you may have rights to access, correct, delete, restrict, port, or object to processing of your personal data, and to withdraw consent. EU/UK residents also have the right to lodge a complaint with a supervisory authority. We will respond to verified requests within one month.

To exercise these rights, email info@marketleappartners.com.

8. Security

We use appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls, and least-privilege practices. No system is perfectly secure; please use a strong, unique password.

9. Cookies

We use essential cookies required for login and core functionality, and may use limited analytics cookies to understand how the Service is used. You can control cookies via your browser settings; disabling essential cookies may break login.

10. Changes

We may update this notice. The "Last updated" date at the top reflects the most recent revision. Material changes will be communicated via email or in-app notice.