Privacy Policy

• Account data: name, email, and credentials to maintain your account.
• Exchange connection data: encrypted API keys and credentials (never exposed client-side).
• Usage & technical data: logs, IP, device info, and activity metrics for reliability and security.

• Authenticate users and deliver core services.
• Process subscriptions securely via third parties.
• Send alerts/notifications (e.g., Telegram or email).
• Monitor performance and detect/prevent abuse or fraud.

We use encryption in transit (HTTPS/TLS) and at rest for sensitive credentials. No digital system is completely secure, so you use the Services at your own risk.

We do not sell or rent your personal data. We share limited data only with the following trusted processors that help run Tradion:

• NOWPayments — processes cryptocurrency subscription payments (invoice and transaction data).
• Google Analytics — collects anonymized usage metrics with IP anonymization enabled; only active if you consent to cookies.
• Sentry — receives error reports for reliability monitoring (no personally identifiable information sent).
• Google OAuth — authenticates sign-ins via Google (email and profile name only).
• Telegram — delivers trading alerts and notifications if you choose to link your Telegram account.
• SMTP email provider — sends transactional emails (verification, receipts, alerts).

We may disclose information if required by law or valid legal requests.

We retain data only as long as needed for the Services or legal obligations. Specific retention periods:

• Account data and trading history — retained while your account is active; deleted on account deletion.
• Exchange API credentials — encrypted at rest; deleted immediately on account deletion.
• Payment and transaction records — retained for up to 7 years for tax and audit compliance, then anonymized.
• Audit logs — automatically deleted after 1 year.
• Backups — rolling 30-day retention; purged thereafter.

When no longer needed, data is deleted or anonymized.

Depending on your region, you have the right to:

• Access — request a copy of all personal data we hold about you (available via your account settings).
• Rectification — correct inaccurate personal data.
• Erasure — delete your account and all associated data.
• Portability — export your data in a machine-readable JSON format.
• Object — object to certain processing activities.
• Restrict — request we limit how we process your data.

Contact support@tradion.app to exercise any of these rights.

We use a cookie consent banner to request your permission before loading non-essential cookies. Analytics (Google Analytics with IP anonymization) are only activated after you give explicit consent.

Essential cookies required for authentication and core functionality do not require consent.

Cross-border data transfers may occur when using third-party processors. We use Standard Contractual Clauses (SCCs) and other reasonable safeguards to comply with applicable data protection laws.

In the event of a personal data breach likely to result in high risk to your rights, we will notify affected users without undue delay and report to the relevant supervisory authority within 72 hours as required by GDPR Article 33.

We may update this policy to reflect operational or legal changes. The date below shows the most recent revision.

Questions? Email support@tradion.app.