🔒 Privacy Policy

Last updated: August 18, 2026

This Privacy Policy explains how Traceless ("we", "us") collects, uses, stores, and protects your information when you use our Platform. We are committed to protecting your privacy in accordance with applicable laws, including the EU General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA), where they apply to you.

1. Information We Collect

Account information: username, email address, and password (stored as a secure hash).
Exchange API credentials: API keys and secrets you provide to connect your exchange accounts. These are encrypted at rest and used only to execute your trading strategies.
Usage data: pages visited, features used, strategy configurations, and log data such as IP address, browser type, and access times.
Payment information: cryptocurrency wallet addresses used for payments. We do not store your private keys or wallet secrets.
Cookies: small files stored on your device to maintain session state and language preferences (see Section 4).

2. How We Use Your Information

To provide, operate, and maintain the Platform and its features.
To execute your trading strategies via your exchange accounts.
To process payments and manage subscriptions.
To provide customer support and respond to your inquiries.
To improve the Platform, analyze usage patterns, and enhance security.
To comply with legal obligations and enforce our Terms of Service.

3. API Keys and Security

Your exchange API keys are encrypted at rest using industry-standard encryption and are transmitted only over encrypted connections (TLS). We strongly recommend that you:

Grant API keys with trading permissions only, and withdrawal permissions disabled.
Restrict API keys to the specific exchanges and IP addresses you use.
Rotate API keys periodically and revoke them immediately if you stop using the Platform.

We never sell, rent, or share your API keys with third parties, except as required to execute trades on your chosen exchange.

4. Cookies and Tracking

We use essential cookies to maintain your session, authentication state, and language preference. We may use analytics cookies to understand aggregate usage. You can control cookies through your browser settings; disabling essential cookies may prevent the Platform from functioning correctly.

5. Data Sharing

We do not sell your personal data. We may share data only in the following circumstances:

With cryptocurrency exchanges, solely to execute your trading strategies via your API credentials.
With service providers (hosting, payment processing, analytics) that are bound by confidentiality obligations.
When required by law, regulation, or valid legal process.
In connection with a merger, acquisition, or sale of assets, with notice to you.

6. Data Retention

We retain your account information for as long as your account is active. Usage logs are retained for a limited period for security and analytics purposes. You may request deletion of your account and associated data at any time, subject to legal retention requirements.

7. Your Rights (GDPR / CCPA)

Depending on your jurisdiction, you may have the right to:

Access, correct, or update your personal information.
Request deletion of your personal information.
Receive a copy of your data in a portable format (data portability).
Object to or restrict certain processing.
Withdraw consent at any time, where processing is based on consent.
Lodge a complaint with your local data protection authority.

To exercise any of these rights, contact us through the Platform's support channel. We will respond within 30 days.

8. International Data Transfers

Your data may be processed on servers located outside your country of residence. We take appropriate safeguards, including standard contractual clauses where required, to protect your data during international transfers.

9. Children's Privacy

The Platform is not directed to individuals under 18 years of age. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal information, please contact us and we will delete it.

10. Security Measures

We implement appropriate technical and organizational measures to protect your data, including TLS encryption in transit, encryption at rest for sensitive data, and access controls. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be posted on this page with an updated "Last updated" date. Material changes will be notified through the Platform.

12. Contact

For privacy-related questions or requests, please contact us through the Platform's support channel.