1. Information We Collect
We collect the following types of information:
- Account Information: Email address, authentication provider details
- API Keys: Encrypted exchange API credentials (we never store these in plaintext)
- Trading Data: Bot configurations, trade history, PnL metrics
- Usage Data: IP address, browser type, access times (for security)
2. How We Use Your Information
Your information is used to:
- Provide and maintain the Platform services
- Execute trading operations through connected exchanges
- Send important service notifications and updates
- Monitor for fraud and security incidents
- Improve our services and user experience
3. Data Security
🔒 Security Measures
- AES-256-GCM encryption for all API keys and secrets
- TLS 1.3 for all data in transit
- Row-level security in our database
- Regular security audits and penetration testing
- No plaintext storage of credentials
4. Third-Party Services
We use the following third-party services to operate the Platform:
- Supabase: Database and authentication services
- Vercel: Web hosting and edge network
- Railway: Backend infrastructure
- Google AI: AI assistant functionality
5. Data Retention
We retain your data for as long as your account is active. Upon account deletion:
- Your API keys are permanently deleted immediately
- Trading data is retained for 90 days for tax/compliance purposes
- Account metadata is anonymized and retained for analytics
6. Your Rights
You have the right to:
- Access your personal data
- Correct inaccurate data
- Request deletion of your data
- Export your trading history
- Withdraw consent for data processing
7. Cookies
We use essential cookies for authentication and session management only. We do not use tracking cookies or third-party analytics.
8. Contact Us
For privacy-related questions or to exercise your rights, contact us through the Support page.
