Privacy Policy

1. Introduction

TradeyAI ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the TradeyAI service (the "Service"). Please read this policy carefully to understand our practices regarding your personal data.

2. Information We Collect

We collect the following types of information:

• Account Information: Email address, display name, profile picture (when you sign in with Google), and authentication credentials.
• Conversation Data: Messages you exchange with the AI assistant, including the trading ideas and strategy descriptions you provide.
• Strategy and Trading Data: Strategies you create, backtest results, agent configurations, orders, positions, and account balances of the exchange or simulation accounts you connect.
• Exchange API Credentials: API keys and secrets you provide to connect an exchange account. See Section 6.
• Technical Data: IP address, browser type, device information, pages visited, and cookies.
• Diagnostic Data: Error reports and performance data generated when something goes wrong in the Service, which may include your account identifier and the page you were on.
• Communication Data: Feedback and support inquiries you send us.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Process and manage your account and access permissions
• Generate, backtest, and run the trading strategies you ask for
• Place and manage orders on the exchange accounts you connect, on your instruction
• Understand how the Service is used so we can improve it
• Detect, diagnose, and fix errors
• Communicate with you about updates and support
• Ensure security and prevent fraud
• Comply with legal obligations

4. Cookies and Analytics

We use cookies and similar technologies to keep you signed in, to remember your language preference, and to understand how the Service is used.

• Essential cookies: Required for the Service to function, such as your sign-in session and language preference. These cannot be switched off.
• Analytics cookies (Google Analytics 4): We use Google Analytics 4, provided by Google LLC, to measure page views and general usage patterns. Google Analytics sets cookies that assign a random identifier to your browser and collects information such as the pages you visit, your approximate location derived from your IP address, and your device and browser type. This data is processed by Google on our behalf and retained by Google Analytics for 14 months. We do not use Google Analytics data to identify you personally.

You can block analytics cookies through your browser settings, or opt out of Google Analytics across all websites by installing the Google Analytics opt-out browser add-on. For details on how Google handles data, see How Google uses information from sites or apps that use our services.

5. Third-Party Services

We do not sell your personal information. We share information with the following categories of third parties only to the extent needed to operate the Service:

• Google LLC (Google Analytics, Google Sign-In): Analytics as described in Section 4, and authentication when you choose to sign in with Google.
• Sentry (Functional Software, Inc.): Error and performance monitoring. Diagnostic Data described in Section 2 is sent to Sentry so we can find and fix problems.
• AI model providers: Your Conversation Data and the strategy context needed to answer you are sent to third-party large language model providers (currently via OpenRouter, Inc.) to generate responses. We do not send your exchange API credentials to these providers.
• Cryptocurrency exchanges: When you connect an exchange account, we send order instructions and read account data through that exchange's API on your behalf. Your use of the exchange is governed by the exchange's own terms and privacy policy.
• Infrastructure providers: Hosting, database, and email delivery providers that store or transmit data for us.
• Legal requirements: When required by law, or to protect our rights, safety, or property.
• Business transfers: In connection with a merger, acquisition, or sale of assets, subject to this policy.

6. Exchange API Keys

To trade on your behalf, the Service stores the exchange API keys you provide. These keys are encrypted at rest and are used only to read your account data and place the orders your strategies instruct. We never ask for keys with withdrawal permission, and we recommend that you restrict keys to trading only and to the IP addresses we display during setup. You can disconnect an account at any time, after which we stop using the associated keys. You can also revoke the key on the exchange at any time, which immediately ends our access.

7. Data Retention

We retain personal information only as long as needed for the purposes described in this policy, unless a longer period is required by law:

• Account, conversation, and strategy data: For as long as your account exists. Deleted or anonymized when your account is closed.
• Exchange API credentials: Retained in encrypted form until your TradeyAI account is closed. After you disconnect an account, the keys are no longer used.
• Analytics data (Google Analytics): 14 months.
• Diagnostic data (Sentry): Up to 90 days.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction, including encryption of exchange credentials and access controls on our systems. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

9. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of your personal information
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your personal information
• Portability: Request transfer of your data to another service
• Objection: Object to certain processing of your data
• Withdraw consent: Withdraw consent where processing is based on consent

To exercise any of these rights, contact us at the address in Section 12.

10. International Data Transfers and Children

Your information may be transferred to and processed in countries other than your country of residence, including by the third parties listed in Section 5. These countries may have different data protection laws. We ensure appropriate safeguards are in place to protect your information in accordance with this policy.

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected such information, we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the new version on this page and update the "Last updated" date. Your continued use of the Service after any changes constitutes acceptance of the updated policy.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at [email protected].