GDPR Compliant
Privacy Policy
Last updated: March 7, 2026 · We respect your privacy and are committed to protecting your data.
TL;DR — Privacy Summary
- ✓ We collect only what's necessary to operate the Service.
- ✓ We never sell your personal data to third parties.
- ✓ API keys are encrypted at rest with AES-256.
- ✓ You can request data export or deletion at any time.
- ✓ On-chain data is public by design — we never link it to your identity without consent.
1. Data We Collect
| Data Type | Purpose | Retention |
| Email address | Account creation, notifications | Until account deletion |
| Exchange API keys | Execute trades on your behalf | Until revoked |
| Trade history | Analytics, AI model improvement | 12 months after account deletion |
| Wallet address | $TBOT token features, staking | Until disconnected |
| Usage analytics | Product improvement | Anonymized after 90 days |
| IP address | Security, rate limiting | 30 days |
2. How We Use Your Data
- To operate and provide the TradeBot Hub Service, including executing trades via your exchange API.
- To improve our AI trading models using anonymized, aggregated trade data.
- To send transactional emails (trade alerts, account security notifications).
- To display on-chain performance data (only with your explicit consent and opt-in).
- To comply with legal obligations and respond to lawful requests.
3. Data Security
Encryption at Rest
All sensitive data including API keys encrypted with AES-256-GCM.
Encryption in Transit
All communications encrypted with TLS 1.3. HSTS enabled.
Access Control
Role-based access. 2FA required for all admin accounts.
Backups
Encrypted daily backups. 30-day retention. Geo-redundant storage.
4. Third-Party Services
- Bybit — We connect to Bybit's API to execute trades. Bybit's own privacy policy applies to data they collect.
- Stripe — For payment processing. We do not store credit card details.
- Base blockchain — On-chain performance data is public by design of the blockchain.
- Vercel / Hetzner — Infrastructure hosting within EU/EEA.
5. Your Rights (GDPR)
As an EU-based service, we comply with the General Data Protection Regulation (GDPR). You have the right to:
Access — Request a copy of your data
Rectification — Correct inaccurate data
Erasure — Request data deletion
Portability — Export your data
Objection — Object to data processing
Restriction — Limit data processing
To exercise any of these rights, email dev@tradebothub.app. We will respond within 30 days.
6. Cookies
We use only essential cookies required for authentication and session management. We do not use tracking cookies, advertising cookies, or third-party analytics that track individual users. Usage analytics are collected server-side and anonymized.
7. Data Processing Location
All data is processed and stored within the European Economic Area (EEA). We do not transfer personal data outside the EEA without appropriate safeguards as required by GDPR.
8. Contact
Data Protection Officer: dev@tradebothub.app
TradeBot Hub OÜ · Tallinn, Estonia · EU Registry: 16XXXXXXX
