Privacy Policy

1. Overview

This Privacy Policy explains how Crypto AI Trader (https://crypto-ai-trader.cc) collects, uses, and retains personal data.

By using the Service you acknowledge this Policy alongside our Terms of Use.

2. Data we collect

• Account data: username, email, password hash, role, display name, profile fields you choose to add.
• Security data: session identifiers, 2FA configuration, passkey metadata, login and security event logs.
• Usage data: pages visited, actions in the dashboard (traffic analytics), IP address and browser user-agent on auth events.
• Trading data: paper/live settings, wallet snapshots, backtest runs, and encrypted Binance API credentials if you add them.
• Forum data: posts, comments, reactions, and moderation reports.
• Telegram linkage: Telegram user ID when you connect an account.

3. How we use data

• Authenticate you and provide dashboard features for your plan tier.
• Operate paper and live trading tools you enable.
• Send verification, password-reset, and security emails (via Gmail OAuth or SMTP you configure on the server).
• Send optional Telegram notifications for security or bot events.
• Improve reliability, detect abuse, and maintain audit logs for administrators.

4. Legal bases & retention

We process data to perform our contract with you (providing the Service) and for legitimate interests (security, capacity management, and abuse prevention).

• Free accounts inactive for 7 days may be deleted — see Terms §5.
• Security and traffic logs are kept for a limited period for operations and abuse review.
• Paid subscription billing records follow payment processor requirements.
• You may request account deletion through an administrator while your account is active.

5. Cookies and local storage

• HttpOnly session cookies keep you signed in.
• CSRF tokens protect mutating requests.
• Browser local/session storage may cache UI preferences and session metadata.

6. Third-party services

Each third party has its own privacy policy. We do not sell your personal data.

• Binance — market data and trading execution when you connect API keys.
• Telegram — bot notifications and optional account linking.
• Google (Gmail) — transactional email when configured.
• Cloudflare — public HTTPS tunnel and DDoS protection.
• PayPal — subscription payments when enabled.

7. Security

Passwords are stored hashed. API secrets are encrypted at rest. Two-factor authentication is required on the public production site. No system is perfectly secure — use strong unique passwords and protect your devices.

8. Your choices

• Update profile and security settings in the dashboard.
• Disconnect Telegram or remove API keys at any time.
• Do not create an account if you disagree with this Policy.

9. Children

The Service is not directed to children under 18. We do not knowingly collect data from children.

10. Changes

We may update this Policy. Material changes will be reflected in the Last updated date. Continued use after updates constitutes acceptance.

11. Contact

Privacy questions: contact the operator through support channels on https://crypto-ai-trader.cc.