Sold by Muza Technologies, 50 Long Street, Cape Town, 8000, South Africa — registration number (to be confirmed).
PRIVACY NOTICE
Effective date: 25 October 2026
This Privacy Notice explains how MUZA Capital handles personal data when you visit https://muzacapital.store, create an account, subscribe to or use MUZA Trading Academy, contact support, or use the AI tutor and market simulator.
1. Who is responsible for your data
1.1 Muza Technologies, 50 Long Street, Cape Town, 8000, South Africa, registration number (to be confirmed), is the controller responsible for personal data processed in connection with MUZA Trading Academy.
1.2 “MUZA Capital” and “MUZA Trading Academy” are brand names used by Muza Technologies.
1.3 Privacy enquiries and requests may be sent to privacy@muzacapital.store.
2. Data we collect
We may collect:
2.1 Account data: your email address, password hash, account identifiers, account status and security records. We do not store your password in readable form.
2.2 Subscription and payment data: subscription status, invoices, payment asset, amount, dates, transaction identifiers, wallet-address information made available through a payment, and fraud or payment-failure records. Detailed payment records are kept by our billing or payment provider. We do not receive card details where a card provider collects them directly.
2.3 Learning data: course enrolment, lessons viewed, progress, knowledge-check and mastery-assessment activity, scores and completion records.
2.4 Simulator data: virtual balances, simulated orders and trades, simulator settings and performance records. The simulator uses virtual money only and cannot connect to a real trading account.
2.5 AI tutor data: prompts, conversations, tutor responses, associated course context and technical records needed to operate and secure the tutor.
2.6 Support data: emails and other communications with support, privacy or admissions teams, including attachments and information you choose to provide.
2.7 Technical and website data: IP address, browser and device information, timestamps, security logs, page requests, cookie identifiers and basic referral information.
3. Why we use personal data
We use personal data to:
(a) create, authenticate and secure accounts;
(b) provide courses, assessments, the simulator and AI tutor;
(c) record learning progress and restore it when you return;
(d) administer subscriptions, collect payments, retry failed payments and prevent fraud;
(e) respond to support and privacy requests;
(f) maintain, troubleshoot and improve the Academy;
(g) enforce our Terms and protect users, systems and rights;
(h) comply with tax, accounting, sanctions and other legal obligations; and
(i) establish, exercise or defend legal claims.
For people in jurisdictions that require a legal basis, the applicable bases may include performance of the subscription contract, compliance with legal obligations, legitimate interests in operating and securing the Academy, and consent where legally required. The correct allocation of legal bases is (to be confirmed) pending confirmation of the controller and locally qualified privacy review.
4. AI tutor providers
4.1 AI tutor conversations are sent to a third-party AI model provider so that the provider can generate a response. Do not enter wallet credentials, passwords, private keys, government identifiers, sensitive financial information or information about another person.
4.2 Customers in the EU, EEA, UK or Switzerland are routed to a different AI model provider from the default provider. This routing is intended to support the applicable regional data-handling arrangements, but it does not by itself guarantee that all processing occurs in the customer’s country.
4.3 The provider may process prompts, responses and technical metadata on our behalf, subject to contractual and security controls (to be confirmed).
4.4 We do not authorize an AI provider to use Academy conversations to train general-purpose models unless this is clearly disclosed and a lawful basis exists. Current provider settings must be confirmed before publication: (to be confirmed).
5. Payments and billing
Our billing and payment providers process payment records to complete transactions, administer monthly renewals, retry failed payments, prevent fraud and maintain required financial records. Blockchain transactions may be permanently visible on a public ledger. We cannot delete or alter information recorded on a public blockchain.
6. Cookies and website measurement
6.1 We use cookies or similar storage that is necessary for login, security, session management, preferences and subscription functions.
6.2 We may use basic first-party or privacy-oriented measurement to understand aggregate website use and search-engine performance. At present we use no analytics tool on the website; we use search-engine webmaster reports, which contain aggregate data only.
6.3 We do not use advertising cookies, cross-site behavioural advertising or ad-tracking pixels.
6.4 Where law requires consent for a non-essential cookie, it will not be set before valid consent is obtained.
7. Statistical comparison by group compliance
Once each quarter, group compliance may conduct an aggregate-only statistical comparison between hashed applicant email addresses from a separate free group programme and hashed Academy customer email addresses. The purpose is to measure aggregate overlap, not to make decisions about individuals. The Academy and the other programme maintain separate databases. The comparison dataset is retained only briefly for the quarterly analysis (to be confirmed), access is restricted, results are reported only in aggregate, and the process must not be used to re-identify anyone. The legal basis, hashing design, minimum reporting threshold, controller roles and any required notice or consent are (to be confirmed) and must be approved by qualified privacy counsel before this comparison begins.
8. When we share data
We may share relevant data with:
(a) hosting, database, email, billing, payment, customer-support and security providers;
(b) AI model providers as described above;
(c) professional advisers under confidentiality duties;
(d) competent public authorities where disclosure is legally required; and
(e) a lawful successor to the Academy, subject to applicable notice and data-protection requirements.
We do not sell personal data. We do not share personal data for cross-context behavioural advertising.
9. International processing
The Academy application and primary database are hosted on a virtual server in the EU. Email is provided through the group mail server. Some service providers, including AI providers and payment infrastructure, may process data in other countries.
Where restricted personal data is transferred internationally, we will use a legally recognized safeguard where required. The relevant locations and transfer safeguards are (to be confirmed) and (to be confirmed) pending provider and controller review.
10. Retention
10.1 Active-account data, learning progress, simulator records and AI tutor history are kept while the account remains active and thereafter only for the periods reasonably needed for the purposes described in this notice.
10.2 Support correspondence is retained for (to be confirmed).
10.3 Security and fraud-prevention records are retained for (to be confirmed), unless a longer period is reasonably required for an active investigation or legal claim.
10.4 Payment, invoice, tax and accounting records are retained for the period required by the laws applicable to the legal operator: (to be confirmed).
10.5 The temporary hashed dataset used for the quarterly statistical comparison is deleted after (to be confirmed). Aggregate statistics that cannot reasonably identify a person may be retained for trend analysis.
10.6 Backups are overwritten under the normal backup cycle within 14 days, unless isolated for security, disaster recovery or a legal obligation.
11. Export and deletion requests
11.1 You may ask for an export of your account data by emailing privacy@muzacapital.store. We may need to verify your identity before responding. The export will cover data associated with your account that we can reasonably provide, subject to the rights of others and applicable law.
11.2 You may request account deletion through the account page at https://muzacapital.store/app/account or by emailing privacy@muzacapital.store.
11.3 Following a valid deletion request, we will delete or irreversibly de-identify account profile data, learning progress, simulator records and AI tutor conversations unless retention is required or permitted by law.
11.4 We may retain limited payment, invoice, tax, fraud-prevention, security and legal-claim records for the applicable periods described above. We may also retain a minimal suppression record where necessary to respect an opt-out or prevent a deleted account from being restored accidentally.
11.5 Deletion cannot remove transaction data already recorded on a public blockchain or data that another independent provider is legally entitled or required to retain.
12. Your privacy rights
Depending on where you live, you may have rights to access, correct, delete, restrict or object to processing, obtain a portable copy of data, withdraw consent, and complain to a data-protection authority.
These rights may be subject to lawful exceptions. We will not discriminate against you for making a privacy request. Requests should be sent to privacy@muzacapital.store.
13. Security
We use reasonable technical and organizational measures designed to protect personal data, including password hashing, access controls and separation of the Academy database from databases used for other group programmes. No online system is completely secure.
14. Children
The Academy is for adults aged 18 and over. We do not knowingly offer accounts to children. If you believe a child has provided personal data, contact privacy@muzacapital.store.
15. Changes to this notice
We may update this notice to reflect changes in the Academy, providers or law. We will post the revised notice and give additional notice where a material change or applicable law requires it.