Privacy Policy

1. Information We Collect

• Account information: Email address, display name (via Google OAuth).
• API credentials: Encrypted at rest using AES-256-GCM. Never logged or displayed in plaintext.
• Trading data: Records of trades executed through our bots, for your dashboard and analytics.
• Usage data: Pages visited, feature usage, and error logs for improving the service.

2. How We Use Your Data

• To operate the copy-trading bots you configure.
• To display your trading performance and analytics.
• To process subscription payments via Stripe.
• To send notifications you have opted into (Slack, Push).
• To improve the Service and fix bugs.

3. Data Storage & Security

Data is stored in Supabase (PostgreSQL) with Row Level Security. API keys are AES-256-GCM encrypted. All connections use HTTPS/TLS. We do not sell or share your data with third parties except as required to operate the Service (Stripe for payments, Upstash for caching).

4. Data Retention

Trade records and analytics are retained for the life of your account. Bot logs are retained for 30 days. You can request account deletion at any time by contacting support.

5. Your Rights

• Access your data via the dashboard and API.
• Delete your API keys at any time from Settings.
• Request full account deletion by emailing support.
• Request a data export by contacting support.

6. Cookies

We use essential cookies for authentication (Supabase session). We do not use tracking cookies or third-party analytics.