The YAKUZZA AI platform collects various categories of information to deliver its services effectively. This includes:

• Account Data: Full name, email address, encrypted password, and optional phone number at registration.
• Subscription & Payment Data: Selected plan details, subscription start and expiry dates. We do not store raw card details — all payments are processed through secure certified gateways.
• Usage Data: IP address, browser type, pages visited, and session duration.
• Support Messages: Live chat transcripts exchanged with our support team.
• Uploaded Content: Images or files shared in support conversations.

Under GDPR, every processing activity requires a lawful basis. Here is the legal basis we rely on for each type of processing:

• Account & Service Data: Performance of a contract — Art. 6(1)(b) — necessary to create your account and deliver the service.
• Usage Analytics & Security: Legitimate interests — Art. 6(1)(f) — to improve the platform and ensure its security.
• Marketing & Promotions: Explicit consent — Art. 6(1)(a) — you may withdraw consent at any time without retroactive effect.
• Legal Obligations: Legal obligation — Art. 6(1)(c) — compliance with judicial or regulatory orders.

We use your data solely for the following purposes:

• Creating and managing your account, and verifying your identity.
• Activating your subscriptions and granting access to paid content.
• Sending account-related notifications (renewal reminders, security alerts).
• Improving platform performance based on usage analytics.
• Responding to inquiries and technical issues.
• Sending promotional offers (opt-out available at any time).

We use cookies and similar technologies for the following purposes:

• Session Cookies: Essential to maintain your login state while browsing the platform.
• Preference Cookies: To remember your language choice (Arabic/English).
• Performance Cookies: To analyze usage patterns and improve user experience.
• Marketing Cookies: May be used to show you personalized content.

You can decline non-essential cookies via the consent banner at the bottom of the page, or through your browser settings. This may affect some platform features.

We do not sell your personal data to any third party. We may share data only in the following circumstances:

• Service Providers: Hosting infrastructure (Hostinger), certified payment gateways, and email delivery services — only to the extent necessary to deliver the service.
• Legal Requirements: If required to disclose data in response to a valid legal or court order.
• Rights Protection: To prevent fraud or violations of our Terms of Service.

Third-party services operating on our platform include: Google Fonts and Trustpilot. Each has its own privacy policy.

The data controller responsible for processing your personal information is:

• Platform Name: YAKUZZA AI — Management Najm Forex
• General Supervisor: Najm — Direct contact: @najm779
• Support & Privacy Channel: @NajmFX_Support (Telegram)
• Data Protection Officer (DPO): Not formally appointed — all privacy requests go through official support channels above.

Some of your data may be processed outside the EU/EEA through our service providers:

• Hostinger (Hosting): Data centers in Europe and Singapore — protected by Standard Contractual Clauses (SCCs).
• Google Fonts: Subject to Google's DPA and the EU-US Data Privacy Framework (DPF).
• Trustpilot: Headquartered in Denmark (within the EU).

We ensure appropriate safeguards are in place per GDPR Article 46 for all international transfers.

Mandatory disclosure under GDPR Article 22 regarding AI use on our platform:

• Nature of System: An assistive analysis tool — a human always makes the final decision, not the system.
• Logic Used: Technical indicators, Japanese candlestick patterns, and probability weights based on historical market data.
• Potential Effects: Analyses are advisory, not binding — no legal liability arises from them.
• Right to Human Intervention: You may request a human review of any analysis via @NajmFX_Support.

We follow high industry standards to safeguard your data:

• All communications encrypted via HTTPS/SSL.
• Passwords hashed using the bcrypt algorithm.
• Database protected against SQL Injection via Prepared Statements.
• Two-Factor Authentication (2FA) support for premium accounts.
• Periodic security audits of our infrastructure.
• Password Policy: Minimum 8 characters including a number, symbol, and uppercase letter.
• Session Expiry: Automatic logout after 30 minutes of inactivity.
• Least Privilege Principle: Only a limited team accesses your data on a need-to-know basis.

Despite our best efforts, no internet transmission is 100% secure. We recommend using a strong, unique password for your account.

We retain your data for the duration of your active subscription. After account deletion, data may be retained for up to 365 days for legal and accounting purposes. You may request full deletion at any time, subject to legal obligations.

Live chat logs are retained for 90 days then automatically purged.

You hold the following rights regarding your personal data:

• Right of Access: Request a copy of your data stored with us.
• Right of Rectification: Update or correct any inaccurate information.
• Right of Erasure: Request full deletion of your account and data.
• Right to Object: Object to processing your data for marketing purposes.
• Right to Portability: Receive your data in a machine-readable format.
• Right to Lodge a Complaint: You have the right to file a complaint with your national data protection authority — per GDPR Art. 13(2)(d). Find EU authorities: edpb.europa.eu

To exercise any of these rights, contact us via @NajmFX_Support on Telegram. We aim to respond within 5 business days.

Our services are intended exclusively for adults (18+). We do not knowingly collect data from children. If we discover data belonging to a minor, we will delete it immediately. If you are a guardian who believes your child has registered with us, please contact us immediately.

Upon discovering a security breach affecting your data, we commit to the following:

• Within 72 hours: Notify the competent supervisory authority per GDPR Art. 33 if the breach poses a risk to users' rights and freedoms.
• Without undue delay: Directly notify affected users via email if the breach poses a high risk (GDPR Art. 34).
• Notification content: Nature of the breach, affected data, corrective measures taken, and a contact point for queries.
• Internal log: We maintain a record of all discovered breaches regardless of their scale.

If you suspect your account has been compromised, contact us immediately at @NajmFX_Support

If you reside in California (United States), the CCPA/CPRA laws grant you the following rights:

• Right to Know: Request disclosure of categories of data collected about you in the past 12 months.
• Right to Delete: Request deletion of your data, subject to legal and security exceptions.
• Right to Opt-Out of Sale/Sharing: We confirm we do not sell or share your personal data with any commercial third party.
• Right to Correct: Correct inaccurate personal information in our records.
• Right to Non-Discrimination: Exercising your rights will not affect the quality of service provided to you.

To submit a CCPA request, contact @NajmFX_Support and include "CCPA Request" in your message.

We may update this policy from time to time. For material changes, we will notify you via:

• Your registered email address.
• A prominent notice in your dashboard.
• An announcement in our official Telegram channel.

Your continued use of the platform following any changes constitutes acceptance of the updated policy.

For any privacy-related inquiry or to exercise your rights, contact us via the following channels: