1. Information We Collect
We collect information necessary to provide and improve the Service:
- Account Information: Email address, name, and authentication credentials when you create an account
- Trading Configuration: Your trading preferences, risk parameters, selected trading pairs, and trading mode settings
- API Keys: Encrypted exchange API keys that you voluntarily provide to enable automated trading
- Usage Data: Platform interactions, feature usage, and session information for analytics and service improvement
- Transaction Records: Records of signals, positions, and decisions generated through the Platform
2. Legal Basis for Processing (GDPR Art. 6)
We process your personal data under the following legal bases:
- Contract Performance (Art. 6(1)(b)): Processing necessary to provide the trading service, execute signals, manage your account, and deliver features you signed up for
- Legitimate Interest (Art. 6(1)(f)): Platform security monitoring, fraud prevention, service improvement, and analytics — balanced against your rights and interests
- Legal Obligation (Art. 6(1)(c)): Processing required by law, such as financial record-keeping or responding to legal requests
- Consent (Art. 6(1)(a)): Where applicable, for optional analytics cookies and non-essential communications. You may withdraw consent at any time.
3. How We Use Your Information
We use collected information to:
- Provide, maintain, and improve the Platform and its features
- Execute automated trading instructions based on your configured parameters
- Generate personalized signals and analysis based on your settings
- Send service-related notifications and alerts
- Monitor and ensure Platform security and integrity
- Comply with legal obligations
4. API Key Security
Exchange API keys you provide are encrypted at rest and in transit. We implement industry-standard encryption and access controls. API keys are used solely for the purpose of executing trading operations on your behalf according to your configured parameters. We strongly recommend you configure API keys with trade-only permissions and no withdrawal access.
5. Information Sharing
We do not sell, rent, or trade your personal information. We may share information only in the following circumstances:
- Third-Party Exchanges: Trade instructions are sent to your chosen exchange(s) via their API
- Service Providers: With trusted infrastructure providers who assist in operating the Platform, subject to confidentiality obligations
- Legal Requirements: When required by law, regulation, legal process, or governmental request
- Safety: To protect the rights, property, or safety of WealthyBot, our users, or the public
6. Data Retention
We retain your information for as long as your account is active or as needed to provide the Service. Specific retention periods:
- Account data: Retained while your account is active. Deleted upon verified erasure request.
- Trading records: Retained for up to 5 years after account closure for compliance and dispute resolution.
- Analytics data: Retained for up to 2 years, then anonymized or deleted.
- API keys: Deleted immediately upon disconnection or account deletion.
You may request deletion of your account and associated data at any time through the Account page or by contacting support.
7. Data Security
We implement appropriate technical and organizational security measures to protect your information against unauthorized access, alteration, disclosure, or destruction. However, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security of your data.
8. Your Rights Under GDPR
Under the General Data Protection Regulation (GDPR) and similar data protection laws, you have the following rights. You can exercise most of these directly from your Account → Privacy & Data Rights panel:
- Right to Access (Art. 15): Request a complete copy of all personal data we hold about you
- Right to Rectification (Art. 16): Correct inaccurate or incomplete personal data via your profile and settings pages
- Right to Erasure (Art. 17): Request permanent deletion of all your personal data ("right to be forgotten")
- Right to Restrict Processing (Art. 18): Request restriction of processing — you can switch to paper mode to stop live data processing
- Right to Data Portability (Art. 20): Export your data in a structured, machine-readable JSON format
- Right to Object (Art. 21): Object to processing based on legitimate interest
- Right to Withdraw Consent (Art. 7(3)): Where processing is based on consent, withdraw it at any time without affecting prior processing
- Right to Lodge a Complaint: You may lodge a complaint with your local data protection supervisory authority
We will respond to verified rights requests within 30 days as required by GDPR. Self-service tools (data export, data deletion) are available in your account settings for immediate execution.
9. International Data Transfers
Your data may be processed on servers located outside the European Economic Area (EEA). Where such transfers occur, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission, to protect your data in accordance with GDPR requirements.
10. Cookies and Analytics
We may use cookies and similar technologies to improve the user experience, analyze usage patterns, and maintain session state. You can control cookie settings through your browser preferences.
11. Children's Privacy
The Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from minors.
12. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated through the Platform. Your continued use after changes constitutes acceptance of the updated policy.
13. Related Policies
14. Data Protection Contact
For privacy-related questions, to exercise your data rights, or to lodge a complaint about data processing, please contact our Data Protection team through the Platform's support channels. We aim to respond to all privacy inquiries within 30 days.