This Privacy Policy explains how IBRLive India Private Limited ("IBRLive", "we", "us", or "our") collects, uses, shares, and safeguards personal information when you visit our website, create an account, or use the FXPRESS Standard Forward Rate Portal and related services (collectively, the "Services"). By using the Services, you agree to the practices described in this policy.
1. Scope & who we are
FXPRESS Standard is IBRLive's subscription Forward Rate Portal for importers, exporters, and businesses managing foreign-exchange exposure. It provides live interbank reference rates, real-time forward premiums, a forward rate calculator, rate alerts, and tools to digitally record and track booked forward contracts.
This policy applies to the FXPRESS Standard portal and the marketing pages at ibrlive.com. For the purpose of applicable data-protection laws โ including India's Digital Personal Data Protection Act, 2023 (DPDP Act) and, where relevant, the EU/UK GDPR โ IBRLive India Private Limited is the data controller (or "Data Fiduciary") responsible for your personal data.
2. Information we collect
We collect only the information needed to provide and improve the Services:
| Category | Examples |
|---|---|
| Account data | Your name, business/company name, email address, phone number, password (stored hashed), and account preferences provided at sign-up. |
| Subscription & billing | Plan selected (monthly / 90-day / annual), billing name and address, GST or tax details where applicable, invoices, and partial payment details (such as card type and last four digits) returned by our payment processor. We do not store full card numbers. |
| Forward-contract records | Contract details you choose to enter to track your bookings โ see Section 3. |
| Rate alerts & preferences | Currency pairs you watch, alert thresholds, and notification settings. |
| Usage data | Pages and tools you use within the portal, rates and pairs viewed, calculations performed, timestamps, and IP address. |
| Support communications | Messages, emails, and any information you share when you contact our support team. |
| Technical & device data | Browser type and version, operating system, referring pages, and similar diagnostic data collected automatically. |
| Cookies & analytics | Identifiers and usage data collected via cookies and tag managers โ see Section 6. |
3. Forward-contract records you enter
A core feature of FXPRESS Standard is the ability to digitally record and monitor the forward contracts you have booked with your own bank. Any details you enter are your business records, stored so the portal can show you live profit and loss, utilization status, and expiry reminders. These may include:
- Currency pair, notional amount, and trade direction (buy/sell).
- Booked forward rate, booking date, and maturity/delivery date.
- The name of the bank or counterparty with whom the contract is booked.
- Full and partial utilization, cancellations, and related notes you add.
You decide what to enter, and you can view, edit, or delete these records at any time from your account. We use this information only to provide the tracking, calculation, alert, and reporting features to you, and we do not share your contract records with your bank or any third party except as described in Section 7.
4. How we use your information
- To create and manage your account, authenticate you, and provide access to the portal.
- To deliver live interbank reference rates, forward premiums, and the forward rate calculator.
- To store and display your forward-contract records with real-time profit/loss, utilization tracking, and expiry alerts.
- To send the rate alerts and contract notifications you configure.
- To process subscription payments, send invoices, and manage renewals and cancellations.
- To provide customer support and respond to your enquiries.
- To send service and transactional messages (e.g. billing notices, security alerts, and material changes to the Services).
- To secure, maintain, and improve the performance and reliability of the platform, and to prevent abuse or fraud.
- To comply with legal, regulatory, accounting, and tax obligations.
We send marketing emails only where permitted, and you can opt out at any time using the unsubscribe link or by contacting us.
5. Legal bases for processing
Where the GDPR or DPDP Act applies, we rely on one or more of the following: performance of our contract with you (to provide the Services); your consent (e.g. for non-essential cookies or marketing); our legitimate interests (to secure, operate, and improve the platform and prevent abuse); and legal obligation (to meet tax, accounting, and regulatory duties). Where we rely on consent, you may withdraw it at any time.
8. Payments
Subscription payments are handled by third-party payment gateways. When you pay, your card or payment details are collected and processed directly by the gateway under its own security standards (including PCI-DSS). IBRLive receives confirmation of payment and limited billing metadata (such as card type and the last four digits) but does not store your full card number, CVV, or banking credentials.
9. Data retention
We retain personal data and your forward-contract records for as long as your account is active or as needed to provide the Services, and afterwards only as required to meet legal, tax, accounting, security, or dispute-resolution obligations. When data is no longer needed, we delete or irreversibly anonymize it.
10. Security
We use appropriate technical and organizational measures to protect your data, including encryption in transit (HTTPS/TLS), hashed password storage, access controls, and monitoring. No method of transmission or storage is completely secure, so we cannot guarantee absolute security; please keep your account credentials confidential and notify us immediately if you suspect any unauthorized use of your account.
11. Your rights
Subject to applicable law, you may have the right to:
- Access the personal data we hold about you and request a copy.
- Correct inaccurate or incomplete data.
- Request erasure of your data, except where we must retain it for legal or administrative reasons.
- Object to or restrict certain processing, and withdraw consent where processing is based on consent.
- Request portability of data you have provided to us, including your contract records.
- Nominate another person to exercise your rights in case of death or incapacity (under the DPDP Act).
- Lodge a complaint with a data-protection authority (such as the Data Protection Board of India).
To exercise any of these rights, contact us using the details in Section 15. We may need to verify your identity before acting on a request.
12. International data transfers
We are based in India and may process and store data on servers located in India or other countries through our infrastructure providers. Where data is transferred across borders, we take steps to ensure it is protected by appropriate safeguards consistent with this policy and applicable law.
13. Children's privacy
The Services are intended for businesses and professionals and are not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.
14. Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you through the Services or by email. Your continued use of the Services after an update constitutes acceptance of the revised policy.
15. Contact us
If you have questions about this Privacy Policy or how we handle your data, please contact us: