Privacy policy

What we collect

• Account: your email address, an optional display name, your password (stored only as a secure hash), your two-factor secret (encrypted), and, with Google sign-in, your Google account's identifier and email.
• Exchange and AI keys: encrypted at rest; the website can store a key but only the trading engine can read it.
• Trading: your settings, strategies, signals, risk decisions, orders, trades and results.
• Security: your sessions (with the IP address and browser they came from) and an audit log of sign-ins, changes and trading decisions.
• Telegram: the chat you link, if you link one.
• Reports: what you write on the Report page, an optional screenshot (re-encoded so it carries no photo metadata) and, if you are signed out, the email you leave for an answer. We do not store the IP address of a report.

Why

To run the service you asked for (scanning, trading and protecting your trades on your exchange), to keep your account secure (sign-in checks, two-factor, the audit log), to answer your reports, and to send the emails the service needs (confirmation, password reset, notices about your account).

Who it is shared with

• Your exchange (Binance or Hyperliquid): the orders and requests made with your keys.
• CoinMarketCap: market-data requests made with your own key.
• Your AI provider (Anthropic, OpenAI or Google), only if you connect one: market data and the question for each decision, with your key.
• Telegram, if you link it: the messages about your trades.
• Google: sign-in with Google if you use it, and the email service that delivers our emails.
• Cloudflare: carries the website's traffic to our server.

We do not sell your data, and we do not use it for advertising.

Cookies

Only the ones the service needs: a session cookie and a security token while you are signed in, and a short-lived one during Google sign-in. Your theme and a few display choices are kept in your browser. There are no analytics, advertising or tracking cookies.

How long we keep it

• Your account, settings and keys: while your account exists. Removing a key overwrites it.
• Trades, orders and results, and the audit log: kept as the lasting record of what happened in your account.
• Signals and risk decisions: one year. Logs of AI calls: 30 days. Delivered notifications: 90 days.
• Encrypted backups of the database: a few days.

Your choices

You can see and change your profile, remove exchange and AI keys, unlink Telegram, and export your trades and signals from the dashboard. To ask for a copy of your data, a correction, or to close your account, use the Report page. When you close your account we disable it and delete your keys; records of trades and the audit log stay as the record of what happened.

Security

Keys and secrets are encrypted, passwords are hashed, connections use HTTPS, and access inside the platform is limited to what each part needs. See Security.

Changes

We may update this policy; the date at the top shows the latest version.