Privacy Policy

1. What we collect

• Account email and hashed password
• Encrypted exchange API credentials (never stored in plain text)
• Trading activity, positions, and performance data for your dashboard
• Billing status via Stripe (we do not store full card numbers)
• Technical logs (IP address, request timestamps) for security

2. How we use data

We use your data to operate the service: execute automated trades on your behalf, show dashboard analytics, send transactional emails, process subscriptions, and prevent abuse.

3. Exchange API keys

API keys are encrypted at rest using AES-256-GCM. Keys are used only to trade on your connected exchange account. We never request withdrawal permissions.

4. Third parties

We use Stripe for payments, your chosen email provider for transactional mail, and OKX (or future exchanges) for trade execution. We do not sell your personal data.

5. Retention & deletion

We retain account and trade history while your account is active. You may request account deletion by contacting support; some records may be kept where required by law or for billing disputes.

6. Security

We use industry-standard practices including encrypted credentials, JWT sessions, and rate limiting. No system is 100% secure — report issues to support@crx.io.

7. Your rights

Depending on your jurisdiction you may have rights to access, correct, or delete personal data. Contact us to exercise these rights.