Privacy Policy

1. Information we collect

• Account information — your email address, display name, and password (passwords are handled by our authentication provider and never stored by us in plain text). If you sign in with Google, we receive your basic Google profile (name, email, profile photo).
• Exchange API keys — the API key/secret you connect for your exchange (e.g. Binance). These are encrypted at rest and used only to place the trades you authorise.
• Payment information — records of your payments (plan, amount, method, status, timestamps) and, for manual payments, any screenshot you upload. Card and crypto payment details are handled by our payment processors; we do not store full card numbers.
• Trading & usage data — your investment amount, targets, trade history, bot status, and how you interact with the Service.
• Referral data — your referral code and, if you were referred, who referred you.
• Technical data — device, browser, IP address, and log data collected automatically for security and diagnostics.
• Communications — messages you send us for support.

2. How we use your information

• To provide and operate the Service, including connecting to your exchange and executing trades you authorise.
• To process and verify payments and manage your subscription.
• To provide support and respond to your requests.
• To maintain security, detect and prevent fraud and abuse.
• To improve and develop the Service.
• To send service-related communications, and (where permitted) updates you can opt out of.
• To comply with legal obligations.

3. How we store & protect your data

We host data on reputable cloud infrastructure (Google Firebase / Google Cloud). Exchange API credentials are encrypted before being stored, and access is restricted. Because the Service is non-custodial, we never hold your funds. No method of transmission or storage is 100% secure, but we take reasonable technical and organisational measures to protect your data.

4. How we share information

We do not sell your personal data. We share it only:

• with service providers who process data on our behalf — e.g. Google Firebase (hosting/auth/storage), and payment processors such as Binance Pay, NOWPayments, and/or Stripe;
• with the exchange you connect, to the extent needed to place your trades;
• when required by law, regulation, or valid legal process; and
• in connection with a business transfer (merger, acquisition, or sale of assets), subject to this Policy.

5. Cookies & similar technologies

We use cookies and local storage to keep you signed in, remember preferences, and understand usage. You can control cookies through your browser settings; disabling some may affect functionality.

6. Data retention

We keep your data for as long as your account is active and as needed to provide the Service, then for any additional period required to comply with legal, accounting, or reporting obligations or to resolve disputes. You may request deletion as described below.

7. Your rights

Depending on your location, you may have the right to access, correct, delete, or export your personal data, to object to or restrict certain processing, and to withdraw consent. To exercise these rights, contact us at support@algoflow.trade. You can disconnect your exchange API keys and delete your account at any time.

8. International transfers

Your data may be processed in countries other than your own. Where it is transferred internationally, we rely on appropriate safeguards as required by applicable law.

9. Children

The Service is not intended for anyone under 18, and we do not knowingly collect data from children.

10. Third-party links

The Service may link to third-party sites and services that have their own privacy practices. We are not responsible for their content or policies.

11. Changes to this Policy

We may update this Policy from time to time. We will update the “Last updated” date and, for material changes, provide additional notice where appropriate.

12. Contact

For privacy questions or requests, contact us at support@algoflow.trade.