Privacy Policy
Last updated: August 2026
1. Data we process
- Account data: username, email address, hashed password, country and profile information you provide.
- Security data: login events with IP address and user agent, active sessions, device fingerprints and two-factor settings.
- Financial data: wallets, ledger entries, deposits, withdrawals, orders, positions and trades.
- Optional verification data: KYC submissions and documents, stored outside the public web root and accessible only to authorised administrators with an audit trail.
- Content: community posts, comments, likes and support tickets.
2. Why we process it
To provide and secure the Service, to execute and record trading activity, to comply with legal obligations, to prevent fraud and abuse, and to communicate service messages you have opted into.
3. Legal basis
Processing is based on the performance of a contract, compliance with legal obligations, and our legitimate interest in operating a secure platform. Where consent is required, it is requested explicitly and may be withdrawn at any time.
4. Exchange credentials
Exchange API keys and secrets are encrypted at rest with AES-256-GCM. They are used solely to place and manage orders on your behalf, are never displayed after saving, and are never transmitted to your browser.
5. Sharing
We share data only with the exchange you connect (order instructions), the email provider configured for transactional messages, and authorities where legally required. We do not sell personal data.
6. Retention
Financial records are retained for the period required by applicable law. Logs are retained for security purposes and rotated. Closed accounts are soft-deleted and can be erased on request, except where retention is legally required.
7. Your rights
You may access, correct, export or request erasure of your data, object to processing, and withdraw consent. Use the support centre or the contact page to make a request.
8. Cookies
The Service uses a session cookie, a CSRF token tied to your session, an optional “remember me” cookie and a local preference for theme. No third-party advertising or tracking cookies are set.
9. Contact
Data protection enquiries can be sent through the support centre or the address published on the contact page of this installation.