Privacy Policy

1. Introduction

Correx ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our money transfer comparison services.

We are a comparison platform and do not process money transfers directly. We help you compare rates and fees from various money transfer providers.

2. Information We Collect

2.1 Information You Provide

• Account Information: When you create an account, we collect your email address, name, and password.
• Search Queries: Currency pairs, transfer amounts, and corridor preferences you search for.
• Rate Alerts: Email address and rate preferences if you set up rate alerts.
• Communications: Information you provide when contacting our support team.

2.2 Information Collected Automatically

• Session IDs: Unique identifiers stored in your browser to track your session across pages.
• Click Tracking: We log which provider quotes you click on, including the corridor, amount, and timestamp.
• Device Information: IP address, browser type, operating system, and device identifiers.
• Usage Data: Pages visited, time spent on pages, and navigation patterns.
• Cookies: See our Cookie Policy section below for details.

3. How We Use Your Information

We use the information we collect to:

• Provide and improve our comparison services
• Display personalized rate comparisons based on your search criteria
• Send rate alert notifications when you've opted in
• Track which providers users prefer to improve our rankings
• Analyze usage patterns to enhance user experience
• Detect and prevent fraud, abuse, and security incidents
• Comply with legal obligations and enforce our terms
• Communicate with you about service updates and features

4. How We Share Your Information

4.1 Money Transfer Providers

When you click on a provider's quote, we redirect you to their website with tracking parameters (currency pair, amount, session ID). The provider may collect additional information directly from you on their site. We are not responsible for their privacy practices.

4.2 Service Providers

We share information with trusted third-party service providers who help us operate our platform:

• Supabase: Database and authentication services
• Vercel: Hosting and content delivery
• Sentry: Error monitoring and performance tracking
• Resend: Email delivery for rate alerts

4.3 Legal Requirements

We may disclose your information if required by law, court order, or government request, or to protect our rights, property, or safety.

4.4 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

5. Cookie Policy

We use cookies and similar tracking technologies to enhance your experience:

5.1 Essential Cookies

• Session Cookies: Track your session across pages (required for functionality)
• Authentication Cookies: Keep you logged in to your account
• Cookie Consent: Remember your cookie preferences

5.2 Analytics Cookies

We use analytics cookies to understand how users interact with our site (page views, search patterns, click rates). You can opt out of these via our cookie consent banner.

5.3 Managing Cookies

You can control cookies through your browser settings. Note that disabling essential cookies may affect site functionality.

6. Your Privacy Rights

Under the General Data Protection Regulation (GDPR) and other privacy laws, you have the following rights:

• Access: Request a copy of the personal data we hold about you
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your personal data ("right to be forgotten")
• Portability: Receive your data in a structured, machine-readable format
• Restriction: Limit how we process your data
• Objection: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw consent for data processing at any time

To exercise these rights, contact us at privacy@correx.com. We will respond within 30 days.

7. Data Security

We implement appropriate technical and organizational measures to protect your data:

• Encryption in transit (HTTPS/TLS) and at rest
• Access controls and authentication requirements
• Regular security audits and monitoring
• Secure data centers with physical security measures

However, no method of transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

8. Data Retention

We retain your personal data for as long as necessary to provide our services and comply with legal obligations:

• Account Data: Until you delete your account, plus 30 days
• Click Tracking: 2 years for analytics and fraud prevention
• Session Data: 90 days
• Rate Alert History: Until you delete the alert or your account

9. Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

10. International Data Transfers

Your information may be transferred to and processed in countries outside your country of residence. We ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email (if you have an account) or by posting a notice on our website. Your continued use of our services after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

13. Supervisory Authority

If you are located in the European Economic Area, you have the right to lodge a complaint with your local data protection authority if you believe we have not complied with applicable data protection laws.