Your data, clearly explained
Privacy Policy
This policy explains what information Stevicap Forex handles, why we use it and the choices available to you.
Last updated: 19 September 2026
1. Who we are
Stevicap Forex is a Stevicap Enterprise service based in Kenya. We provide Forex education, Telegram communities, demo-account trading signals, digital products and related subscription services. For privacy questions or requests, contact us at stevicapenterprise@gmail.com.
2. Information we collect
Depending on how you use the service, we may collect:
- Telegram identifiers, usernames, messages and membership status needed to operate the bot and groups;
- subscription or product choice, currency, payment reference, payment status and access dates;
- content or enquiries you choose to send us;
- website interaction events, referral source and campaign information;
- technical logs such as timestamps, request status, browser or device information and security events; and
- for the business owner only, Google OAuth authorization needed to upload videos to the Stevicap YouTube channel.
We do not receive or store your complete card number, card security code or mobile-money PIN.
3. How we use information
- provide, verify and administer subscriptions, digital-product delivery and Telegram access;
- process payments, refunds and access decisions;
- deliver signals, educational content and service notifications;
- measure funnel performance and improve reliability;
- detect fraud, abuse, duplicate transactions and security incidents;
- comply with legal, accounting and regulatory obligations; and
- publish owner-authorized content to connected social channels.
8A. Trading Journal delivery
Buyers of the Stevicap Forex Trading Journal receive a Google Sheets copy link after verified payment. Google creates the buyer's independent copy in the Google account they choose. Stevicap does not request access to, read or control that personal copy; information the buyer enters into it remains under the buyer's control and Google's applicable terms and privacy policy.
4. Legal bases
We process information where it is necessary to perform a contract with you, comply with law, protect our legitimate interests in operating and securing the service, or where you have given consent. You may withdraw consent for future processing where consent is the applicable basis.
5. Service providers and disclosures
We use service providers to run the platform, including Telegram, payment processors such as Flutterwave, Google and YouTube, Meta, Statsig, Vercel, GitHub and our self-hosted infrastructure provider. They process information under their own terms and privacy policies. We may also disclose information when required by law, to protect users or the service, or as part of a lawful business reorganization. We do not sell personal information.
6. Analytics, cookies and links
The website uses privacy-light analytics to measure visits and actions such as Telegram, plan and partner-link clicks. We do not use session replay. Third-party websites, brokers and social platforms may use their own cookies or tracking. Their privacy practices apply after you leave our service.
7. International processing
Some providers may process information outside Kenya. Where required, we use appropriate contractual, organizational or legal safeguards for cross-border processing.
8. Google and YouTube API data
The owner-operated Stevicap Content Publisher uses Google OAuth and the YouTube Data API only to upload Stevicap's original videos to the authenticated Stevicap YouTube channel. It requests the limited youtube.upload permission. It does not read, download, sell, share or expose other creators' YouTube data, and it does not serve third-party users.
Google authorization credentials are stored in restricted server-side configuration and used only to obtain short-lived access tokens for owner-authorized uploads. Returned YouTube video identifiers and publication outcomes are retained in the internal operational ledger so uploads can be tracked and duplicate publication can be prevented. Our use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements. Google's own practices are described in the Google Privacy Policy.
The channel owner can revoke Stevicap Content Publisher's access at any time through the Google Account connections page. The owner may also request deletion of stored OAuth authorization and associated YouTube publication records by emailing stevicapenterprise@gmail.com. We will revoke or delete the relevant authorization and non-legally-required operational records after verifying the request.
9. Retention and security
We retain information only as long as needed for service delivery, transaction records, dispute handling, security and legal obligations. Temporary social-media staging files are scheduled for deletion after seven days. We use access controls, restricted credentials, encryption in transit and operational monitoring, but no online service can guarantee absolute security.
10. Your rights
Subject to applicable law, including Kenya's Data Protection Act, 2019, you may request access, correction, deletion, restriction, objection or portability of your personal information. You may also complain to Kenya's Office of the Data Protection Commissioner. We may need to verify your identity before completing a request.
11. Children and policy changes
The service is not intended for anyone under 18, and we do not knowingly collect children's information. We may update this policy as the service or law changes. The revised date will appear above, and material changes may also be announced through the website or Telegram.