1. Introduction
Welcome to TradeFollow ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered cryptocurrency trading automation platform.
By accessing or using TradeFollow, you agree to the terms of this Privacy Policy. If you do not agree with our policies and practices, please do not use our services.
2. Information We Collect
2.1 Personal Information
We collect the following types of personal information:
- Account Information: Email address, username, and password when you create an account
- Profile Information: Display name, profile picture, and other optional information you provide
- Payment Information: Billing details and payment card information (processed securely through our payment processor)
- Communication Data: Messages, feedback, and support requests you send to us
2.2 Trading Data
- Exchange API Keys: Encrypted API keys and secrets for connected cryptocurrency exchanges
- Trading History: Records of automated trades executed through our platform
- Bot Configurations: Your trading strategies, monitored accounts, and trigger conditions
- Social Media Data: Twitter/X usernames you choose to monitor (we do not access your personal social media accounts)
2.3 Technical Information
- Usage Data: Information about how you interact with our platform
- Device Information: IP address, browser type, operating system, and device identifiers
- Log Data: System logs, error reports, and performance metrics
- Cookies and Tracking: Data collected through cookies and similar technologies
3. How We Use Your Information
We use the collected information for the following purposes:
- Service Delivery: To provide, maintain, and improve our trading automation services
- AI Analysis: To analyze social media signals using GPT and trigger automated trades based on your configurations
- Account Management: To create and manage your account, authenticate users, and process payments
- Communication: To send you service updates, security alerts, and support messages
- Security: To detect, prevent, and address technical issues, fraud, and security threats
- Analytics: To understand usage patterns and improve our platform's performance
- Compliance: To comply with legal obligations and enforce our Terms of Service
4. API Key Security
Your API keys are extremely important to us. We implement industry-leading security measures to protect your exchange API keys:
- Encryption: All API keys are encrypted using AES-256 encryption before storage
- Secure Storage: Keys are stored in isolated, encrypted databases with restricted access
- No Withdrawal Permissions: We recommend using API keys with trading-only permissions (no withdrawal rights)
- IP Whitelisting: Support for exchange IP whitelisting features where available
- Regular Audits: Periodic security audits and penetration testing
- Zero Knowledge: We never see or store your exchange passwords
5. Data Sharing and Disclosure
We do not sell, rent, or trade your personal information. We may share your information only in the following circumstances:
5.1 Service Providers
We may share data with trusted third-party service providers who assist us in operating our platform:
- Cloud hosting providers (AWS, Google Cloud, etc.)
- Payment processors (Stripe, PayPal, etc.)
- Email service providers
- Analytics platforms
- Customer support tools
5.2 Legal Requirements
We may disclose your information if required by law or to:
- Comply with legal processes, court orders, or government requests
- Enforce our Terms of Service and other agreements
- Protect the rights, property, or safety of TradeFollow, our users, or others
- Investigate and prevent fraud, security issues, or technical problems
5.3 Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity. We will notify you of any such change in ownership or control of your personal information.
6. Data Retention
We retain your information for as long as necessary to provide our services and comply with legal obligations:
- Active Accounts: Data is retained while your account is active
- Deleted Accounts: Most data is deleted within 30 days of account deletion
- Legal Requirements: Some data may be retained longer to comply with legal, accounting, or regulatory requirements
- Anonymized Data: Aggregated and anonymized data may be retained indefinitely for analytics
7. Your Rights and Choices
You have the following rights regarding your personal information:
- Access: Request a copy of the personal information we hold about you
- Correction: Update or correct inaccurate information
- Deletion: Request deletion of your personal information (subject to legal obligations)
- Export: Download your data in a portable format
- Opt-Out: Unsubscribe from marketing communications
- API Key Management: View, update, or delete connected exchange API keys at any time
To exercise these rights, please contact us at support@tradefollow.io or through your account settings.
8. Security Measures
We implement comprehensive security measures to protect your information:
- Encryption: SSL/TLS encryption for data in transit and AES-256 for data at rest
- Authentication: Multi-factor authentication (MFA) support for account access
- Access Controls: Strict role-based access controls for our team members
- Monitoring: 24/7 security monitoring and intrusion detection systems
- Regular Updates: Timely security patches and software updates
- Employee Training: Regular security awareness training for all staff
While we strive to protect your information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.
9. International Data Transfers
TradeFollow operates globally, and your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws than your country.
When we transfer your information internationally, we ensure appropriate safeguards are in place, such as:
- Standard contractual clauses approved by regulatory authorities
- Adequacy decisions by relevant data protection authorities
- Privacy Shield certification (where applicable)
10. Children's Privacy
TradeFollow is not intended for users under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately, and we will delete such information from our systems.
11. Third-Party Links
Our platform may contain links to third-party websites, services, or applications (including cryptocurrency exchanges). We are not responsible for the privacy practices of these third parties. We encourage you to read their privacy policies before providing any information.
12. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to:
- Remember your preferences and settings
- Authenticate your account and maintain your session
- Analyze usage patterns and improve our services
- Provide personalized content and recommendations
You can control cookies through your browser settings. However, disabling cookies may affect the functionality of our platform.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:
- Posting the updated policy on our website
- Updating the "Last Updated" date at the top of this page
- Sending you an email notification (for significant changes)
Your continued use of TradeFollow after any changes indicates your acceptance of the updated Privacy Policy.
14. GDPR Compliance (European Users)
If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):
- Legal Basis: We process your data based on consent, contract performance, legal obligations, and legitimate interests
- Right to Object: Object to processing of your data for direct marketing or legitimate interests
- Right to Restriction: Request restriction of processing in certain circumstances
- Automated Decision-Making: We use AI for trade analysis, but you can always disable automated trading
- Supervisory Authority: You have the right to lodge a complaint with your local data protection authority
15. California Privacy Rights (CCPA)
If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA):
- Right to Know: Know what personal information we collect, use, and disclose
- Right to Delete: Request deletion of your personal information
- Right to Opt-Out: Opt-out of the sale of personal information (we do not sell personal information)
- Right to Non-Discrimination: Not be discriminated against for exercising your CCPA rights
To exercise your CCPA rights, please contact us at support@tradefollow.io.
