Privacy Policy
Last updated:
1. What we collect
- Account: your email and a securely hashed password.
- Billing: subscription and payment records (amounts, status, on-chain transaction references) from our payment processor. We do not see or store your card or bank details — payments are made in USDT.
- Exchange API keys: trade-only keys you choose to connect, stored envelope-encrypted at rest. They are verified to be withdrawal-disabled.
- Usage & trade data: the positions and outcomes generated on your account so we can show your dashboard and send trade notifications.
2. How we use it
To operate the service: authenticate you, process subscriptions, place and report trades you’ve enabled, send transactional email (verification, renewals, trade and account notifications), and provide support. We do not sell your personal data.
3. Third parties
We share the minimum necessary with: the crypto payment processor (to bill you), the exchange (to place trades using your key), our hosting/database provider, and our email provider. Each processes data only to deliver the service.
4. Security
Passwords are hashed; sessions are server-side and revocable; API-key secrets are encrypted with per-record data keys wrapped by a master key held outside the database. We enforce trade-only keys so the platform can never withdraw your funds.
5. Retention & your rights
We keep account, billing, and trade records as long as your account is active and as required for legal/accounting purposes. You can revoke API keys, cancel subscriptions, and request deletion of your account via support, subject to records we must retain by law.
6. Contact
Privacy questions: use the in-app support form or our published contact address.