Privacy Policy
This Privacy Policy explains how [LEGAL ENTITY NAME] ("we", "us") collects, uses, and protects your information when you use Kopiora (the "Service").
1. Information we collect
- Account information — your email address and a securely hashed password. We never store your password in plain text.
- Exchange API keys — if you connect an exchange, we store your API key and secret encrypted at rest so the Service can analyse your account and, if you enable it, place orders on your behalf.
- Trading and usage data — settings, signals shown to you, positions and history synced from your connected exchange, and related activity.
- Technical data — IP address, browser/device information, and log data generated when you use the Service.
- Payment data — subscription payments are processed by NOWPayments. We receive confirmation of payment status but do not collect or store your wallet credentials or card details.
2. How we use your information
- To provide, operate, and secure the Service and your account;
- To generate signals and, where enabled, execute trades on your connected exchange;
- To process subscriptions and manage access;
- To communicate with you about your account, security, and service updates;
- To detect, prevent, and address fraud, abuse, or technical issues;
- To comply with legal obligations.
3. How your exchange keys are handled
Your exchange API keys are encrypted before storage and are used only to interact with your exchange account on your behalf. We recommend you connect keys with trading enabled but withdrawals disabled, and restrict them by IP where your exchange supports it. You can revoke your keys at the exchange, or remove them from the Service, at any time.
4. Service providers and sharing
We do not sell your personal information. We share it only with the service providers we rely on to run the platform, and only as needed:
- Hosting & infrastructure — our cloud hosting provider;
- Database — a managed PostgreSQL provider that stores your account and trading data;
- Realtime/cache — a managed cache/queue provider used for live signal delivery;
- Payments — NOWPayments, for subscription processing;
- Exchange — Binance, when the Service acts on your connected account.
We may also disclose information where required by law or to protect our legal rights. [Confirm the specific processors above match your production stack.]
5. Cookies and sessions
We use a session cookie strictly to keep you logged in and to secure your session. We do not use it to track you across other sites. [If you add analytics or marketing cookies, disclose them here and provide a consent mechanism where required.]
6. Data retention
We retain your information for as long as your account is active and as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. When you close your account, we delete or anonymise your personal data within a reasonable period, except where retention is required by law.
7. Security
We use technical and organisational measures to protect your data, including encryption of sensitive credentials at rest and access controls. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.
8. Your rights
Depending on where you live, you may have the right to access, correct, delete, export, or restrict the processing of your personal data, and to object to certain processing. To exercise these rights, contact [[email protected]]. These rights are provided under the laws of [JURISDICTION / GOVERNING LAW] and any other law that applies to you.
9. International transfers
Your information may be processed in countries other than your own. Where it is transferred internationally, we take steps to ensure an appropriate level of protection consistent with applicable law.
10. Children
The Service is not directed to, and may not be used by, anyone under 18. We do not knowingly collect data from children.
11. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above.
Contact
Questions about this Privacy Policy? Contact [[email protected]].