Privacy Policy
1. General Information
The Godfunded is a cashback platform specialized in trading firms, operated by The Godfunded, which acts as the data controller for your personal data.
This Privacy Policy describes how we collect, use, store, and protect your personal information when you use our services. This policy complies with the General Data Protection Regulation (GDPR) and other applicable data protection regulations.
2. Information We Collect
2.1 Personal Information You Provide
We do not routinely ask for personal information or contact data. We only collect information when it is totally necessary to validate a purchase:
Registration Information:
- Email address
- Password (encrypted)
Verification Information (only when necessary to validate purchases):
- Identity verification information
- Purchase documentation
- Specific transaction information
2.2 Information Collected Automatically
When you visit our website, we automatically collect:
Technical Information:
- IP address
- Browser type and version
- Operating system
- Device unique identifiers
- Cookie information (see our Cookie Policy)
Usage Information:
- Pages visited and time spent
- Actions performed on the platform
- Browsing patterns
- Referrers and search terms
2.3 Information from Third Parties
We may receive information from:
- Trading Firms: To verify purchases and affiliate commissions
- Service Providers: For payment processing and analytics
- Authentication Platforms: If you use social login
3. Processing Purposes
3.1 Primary Purposes
We use your personal information to:
Service Provision:
- Create and manage your user account
- Process cashback requests
- Verify eligibility for refunds
- Process withdrawals and payments
- Provide customer support
Verification and Security:
- Verify your identity and prevent fraud (only when necessary)
- Detect and prevent suspicious activities
- Maintain platform security
- Comply with legal and regulatory obligations
3.2 Secondary Purposes
With your additional consent, we may use your information for:
Marketing and Communications:
- Send newsletters and updates
- Information about new firms and promotions
- Personalized commercial communications
- Market analysis and service improvements
Analysis and Improvements:
- Analyze platform usage
- Improve our services and functionalities
- Develop new features
- Market research
4. Legal Basis for Processing
We process your personal data under the following legal bases:
4.1 Contract Performance
- Management of your account and contracted services
- Processing of cashback and withdrawals
- Compliance with our terms of service
4.2 Legitimate Interest
- Security and fraud prevention
- Improvement of our services
- Platform performance analysis
- Service-related communications
4.3 Consent
- Direct marketing and promotional communications
- Non-essential cookies
- Advanced behavioral analysis
- Optional functionalities
4.4 Legal Compliance
- Compliance with financial regulations
- Reporting required by authorities
- Tax and accounting obligations
- Cooperation with competent authorities
5. Information Sharing
5.1 When We Share Your Information
We may share your personal information with:
Trading Firms:
- To verify purchases and generate affiliate commissions
- Only information necessary for verification
- Under strict confidentiality agreements
Service Providers:
- Payment method processors (for withdrawals)
- Cloud storage services
- Analytics and monitoring services
- Technical support providers
Authorized Third Parties:
- When you have explicit consent
- To comply with legal obligations
- In cases of merger, acquisition or asset transfer
- To protect our legal rights
5.2 Data Protection
All our service providers comply with strict data protection standards:
Protection Measures:
- EU standard contractual clauses
- Recognized privacy certifications
- Additional data protection guarantees
Main Providers:
- Supabase: Data processing with GDPR guarantees
- Vercel: Hosting and analytics with adequate protections
- Google Analytics: Web analytics with privacy controls
6. Data Retention
6.1 Retention Periods
We retain your personal information for:
Account Data:
- While your account is active
- 3 years after account closure (for queries)
- Until you request deletion
Transaction Data:
- 7 years (accounting and tax requirements)
- Longer periods if required by law
- Until resolution of pending disputes
Marketing Data:
- Until you withdraw your consent
- Maximum 3 years without interaction
- Shorter periods upon request
6.2 Secure Deletion
When data is no longer needed:
- Secure and irreversible deletion
- Anonymization when possible
- Certification of sensitive data destruction
- Notification to third parties when applicable
7. Your Rights
7.1 Rights under GDPR
As a data subject, you have the right to:
Access and Transparency:
- Obtain confirmation about the processing of your data
- Access your personal data that we process
- Receive information about how we use your data
Rectification and Update:
- Correct inaccurate or incomplete data
- Update outdated information
- Complete missing data
Deletion (“Right to be Forgotten”):
- Request deletion of your personal data
- When data is no longer necessary
- When you withdraw your consent
Processing Restriction:
- Limit the processing of your data
- While you dispute the accuracy of data
- When processing is unlawful
Data Portability:
- Receive your data in structured format
- Transfer data to another provider
- Obtain data in machine-readable format
Objection:
- Object to processing based on legitimate interest
- Object to direct marketing
- Object to automated decision-making
7.2 How to Exercise Your Rights
To exercise any of these rights:
- Contact us by email: info@thegodfunded.com
- Include: Full name, registered email address, and specific description of your request
- Verification: We may request identity verification
- Response: We will respond within 1 month (extendable to 3 months in complex cases)
7.3 Right to Complaint
If you believe we have violated your data protection rights, you can:
- File a complaint with the Spanish Data Protection Agency (AEPD)
- Contact the data protection authority in your country of residence
- Seek judicial remedies
8. Data Security
8.1 Security Measures
We implement technical and organizational measures to protect your information:
Technical Security:
- Data encryption in transit and at rest
- Role-based access controls
- Continuous security monitoring
- Regular penetration testing
- Intrusion detection systems
Organizational Security:
- Data security policies
- Regular staff training
- Confidentiality agreements
- Physical access controls
- Incident response procedures
8.2 Breach Notification
In case of a data breach that may affect your rights:
- We will notify authorities within 72 hours
- We will inform you if the risk is high
- We will take immediate measures to mitigate damage
- We will provide protection recommendations
9. Cookies and Similar Technologies
We use cookies and similar technologies to improve your experience. For detailed information, see our Cookie Policy.
Types of Cookies:
- Essential: Necessary for site functionality
- Functional: Improve user experience
- Analytics: Help us understand site usage
- Marketing: For personalized communications
10. Privacy of Minors
10.1 Minimum Age
Our services are not directed to minors under 18 years old. We do not deliberately collect personal information from minors under 18 years old.
10.2 If We Detect Information from Minors
If we discover that we have collected information from a minor under 18 years old:
- We will delete the information immediately
- We will notify parents/guardians if possible
- We will take measures to prevent future registrations
11. Changes to this Policy
11.1 Updates
We may update this Privacy Policy periodically to:
- Reflect changes in our services
- Comply with new regulations
- Improve transparency
- Incorporate user feedback
11.2 Change Notification
We will notify you of significant changes through:
- Prominent notice on our website
- Email to your registered address
- Platform notification
- Update of the “last updated” date
12. Contact
12.1 Contact Information
For any questions about this Privacy Policy or our data practices:
Email: info@thegodfunded.com Subject: Privacy and Personal Data Inquiry
12.2 Data Protection Officer
If you have specific data protection queries, you can contact our data protection officer at the same email address.
This Privacy Policy is complemented by our Terms and Conditions and Cookie Policy.