Last updated: April 2026
We collect: email address, name, mobile number, exchange API keys (encrypted), and trading activity data.
Your data is used solely to operate the trading service. We never sell or share personal data with third parties.
All API keys are AES-256 encrypted at rest. All connections use TLS 1.3. Database access is restricted to authorized services only.
Trading data is retained for 12 months. Account data is deleted within 30 days of account closure.
You may request data export or deletion at any time by contacting support.
We use httpOnly session cookies for authentication. No third-party tracking cookies are used. localStorage is used for client-side session state only.