Plain language. No dark patterns.

Who we are

myFTBA is owned and operated by Pexels360 Solutions LLP (Reg. No. AAP-2298), registered in Goa, India. Throughout this policy, “we,” “us,” and “our” refer to Pexels360 Solutions LLP.

For privacy questions or data requests, contact us at hello@myftba.com.

What we collect

We only collect what we need to run the service. Specifically:

• ·Email address. Used for login (via one-time codes) and to send you transactional emails (account verification, payment receipts, plan reminders).
• ·Check-in data. Your answers to the four FTBA questions, the timestamp, and the computed metrics (alignment %, archetype, etc.).
• ·IP address. Captured at sign-up to detect your country (so we show you ₹ vs $ pricing) and to prevent fraud. We do not log every page visit.
• ·Device information. Basic technical metadata (browser type, OS, approximate device) for security and to detect suspicious sign-ins.
• ·Payment metadata. Confirmation that a payment was made (transaction ID, plan purchased, amount). We never store your card details — these are handled by PayU and PayPal.

We do not collect: your name (unless you provide it), your phone number, your address, your social media accounts, or any other personal information beyond what’s listed above.

What we don't do

Some explicit promises:

• ·We don’t sell your data to anyone.
• ·We don’t share your check-in data with third parties.
• ·We don’t run ads. We don’t use Google Analytics, Facebook Pixel, or any other tracking pixels on the dashboard.
• ·We don’t train AI models on your data.
• ·We don’t send marketing emails to people who haven’t paid (no “you abandoned your trial” emails).

How we use your data

We use your data only to provide and improve the service:

• ·To authenticate you and let you log in.
• ·To save your check-ins and render your dashboard.
• ·To compute your patterns (daily rhythm, alignment trends, etc.) and show them to you.
• ·To process your payments via PayU or PayPal.
• ·To send you account-related emails (login codes, payment receipts, plan-end reminders).
• ·To detect and prevent fraud, abuse, or unauthorized access.

Third-party services we use

We rely on a small set of trusted services to operate. Each gets only the data it needs to do its job.

• ·Neon (database hosting) — stores your account, check-ins, and payment metadata. Servers located in Singapore.
• ·Vercel (web hosting) — serves the application and handles incoming requests.
• ·Resend (email delivery) — sends login codes and transactional emails on our behalf.
• ·PayU (Indian payment processor) — handles INR transactions. We never see your card details.
• ·PayPal (international payment processor) — handles USD transactions. We never see your card details.

Each of these services has their own privacy policies, available on their websites. We have signed data processing agreements with all of them.

Cookies and tracking

We use a single type of cookie: a session cookie that keeps you logged in for 30 days. It contains a random session token tied to your account in our database.

That’s it. No analytics cookies, no advertising cookies, no tracking pixels, no third-party scripts that follow you around the web.

You can clear this cookie by logging out, or via your browser’s privacy settings. Clearing it just signs you out — your account and data remain intact.

Data retention

Active accounts: we retain your data as long as your account is active.

Inactive accounts:if you don’t log in for 12+ months, we may eventually clean up the account. We’ll send you advance notice via email before doing so.

Deleted accounts: when you request account deletion, we permanently remove your data within 7 business days.

Shared reading links: automatically expire 100 days after creation, regardless of account status.

Payment records: we retain transaction records for 7 years to comply with tax and accounting laws in India.

Your rights

You have the following rights over your data:

• ·Access. Request a copy of all data we hold about you.
• ·Export. Receive your check-in history as a JSON file.
• ·Correct. Update or correct your account information.
• ·Delete. Permanently remove your account and all data.
• ·Object. Tell us to stop processing your data for any specific purpose.

To exercise any of these rights, email us at hello@myftba.com from the email address on your account. We respond within 7 business days.

Security

We protect your data with industry-standard practices:

• ·All connections use HTTPS encryption.
• ·Login codes (OTPs) are hashed before storage and expire in 10 minutes.
• ·Database access is restricted to authenticated, encrypted connections.
• ·Payment data is handled entirely by PCI-DSS-compliant gateways (PayU, PayPal).
• ·We use modern authentication (rotating session tokens, rate limiting, attempt caps).

If we ever have a security breach affecting your data, we will notify affected users within 72 hours via email.

Children's privacy

myFTBA is not directed at children under 16. We do not knowingly collect data from anyone under 16. If you believe a child has created an account, please email us at hello@myftba.com and we will delete the account immediately.

International users

myFTBA is operated from India. By using the service, you understand that your data will be stored and processed in India and Singapore (where our database is hosted).

If you are a resident of the European Union, the United Kingdom, or another jurisdiction with specific data protection laws, you may have additional rights under those laws. To exercise those rights, contact us at hello@myftba.com.

Changes to this policy

If we make material changes to this privacy policy, we will notify you via email at least 14 days before the changes take effect. Minor changes (clarifying language, fixing typos) may be made without notice. The “last updated” date at the top of this page reflects the most recent revision.

Contact us

For any questions about this privacy policy, your data, or your rights, email hello@myftba.com. A real person responds within 24 hours.