Privacy Policy

• Personal Data: Any information relating to an identifiable individual.
• Sensitive Data: If any (e.g. health, biometric) – [if not used, state "We do not collect sensitive personal data except as required by law."]
• API Keys: Credentials (public/private) used to connect your exchange account to our services.
• Automated Decision / Profiling: Use of algorithms / machine learning to make trade decisions or evaluate risk without human intervention.

This policy applies to all our services, including the AI-powered trading bot, website, mobile app, APIs, Copy trades, communications, socials and support.

We process your data on the following legal bases:
• Contract Performance: to provide you with the services you request (e.g. executing trades, distribute earnings and process withdrawal).
• Consent: for activities such as marketing, profiling, processing usage data beyond what is necessary.
• Legitimate Interests: where we need to improve our services, detect fraud, ensure security, etc., in a manner that does not override your rights.
• Legal Obligation: to comply with laws (AML/KYC, tax, regulatory reporting).

Category And Examples
• Identity & Contact
- Name, email, phone number, address, date of birth (if required), username.
• Account & Access Credentials
- Login/password, two-factor auth, API keys, exchange account identifiers. • Financial & Trading Data
- Trade history, balances, P&L, order details, open/closed positions
• Device, Technical & Usage Data
- IP address, device type/model, browser type, OS, log data, usage of the bot, settings.
• Behavioral / Profiling / AI Data
- Algorithm decisions, risk profiles, auto trade parameters, performance metrics
• Third-party Data
- Market data providers, exchange data, analytics, support systems.

We perform regular security reviews and backups to prevent data loss or unauthorized access.

• To provide and maintain the service (execute trades, manage accounts).
• To authenticate you, maintain security, prevent fraud.
• To monitor bot performance, train/improve our AI / analytics.
• To comply with AML/KYC, tax, regulatory obligations.
• To send you notifications, service updates, alerts.
• To send marketing/promotional communications if you opted in.
• To respond to your support requests or inquiries.

• Some decisions (e.g. trade execution by the bot) are automated.
• You are able to configure or disable certain bot behaviors / risk profiles where possible.
• If you believe an automated decision has adversely affected you, you may request human review / override.

We may share your data with:
• Exchanges via API to perform trades (read / write access as needed).
• Service Providers & Sub-processors, e.g. cloud hosting, data storage, analytics, security, communications.
• Regulators, law enforcement where required by applicable laws.
• Third parties in the event of business sale, reorganization (with confidentiality).


We do not sell or rent your personal data to third parties for their advertising or marketing purposes without your explicit consent.

• Some processing or storage may occur outside our Licence jurisdiction.
• We ensure appropriate safeguards are in place, such as encrypted transmissions, contractual data protection agreements, compliance with relevant international standards.

• We retain account / trading data for as long as needed to provide the service & for legal/regulatory reasons ( 5 years for financial records, if required).
• Inactive or closed accounts data may be archived then deleted or anonymised after [6 months].
• Usage / log data usually kept for limited time (5 years) unless required longer for security / fraud investigations.

• Encryption in transit (TLS/SSL) and at rest.
• Access controls and least-privilege principles.
• Multi-factor authentication for sensitive operations.
• Secure storage of API keys (ideally encrypted & only accessed when needed).
• Regular security audits, penetration tests.
• Incident management / breach response protocol.

You have rights under applicable data protection law:
• Right to be informed about what data is collected and how it is used.
• Right of access: request a copy of your data.
• Right to rectification: correct inaccurate or incomplete data.
• Right to erasure / "right to be forgotten" (subject to legal obligations).
• Right to data portability.
• Right to object to processing (including profiling, marketing).
• Right to withdraw consent where processing is based on consent.

• For operations based on consent, you can withdraw consent at any time (through your account settings or contacting us).
• Withdrawal does not affect processing which has already occurred lawfully.

• Our services are not intended for persons under [18] years of age (or local legal age).
• We do not knowingly collect data from children below this age. If discovered, we will delete.

• Use of cookies / local storage / tracking for site functionality, analytics, performance, possibly marketing.
• Option for you to disable or manage cookies in browser settings or via our settings.

• In case of a personal data breach, we will notify affected users as soon as possible and in line with legal obligations.
• We will also notify relevant regulatory authorities as required.

• How to make a request (via DPO email or portal).
• We require verification of identity.
• Timeframe for responses: typically within 30 days (or as per law).

• We may update this policy occasionally.
• When we do, we will post the updated policy with a new effective date and, where materially significant, notify users (by email or via website news update notification).

For questions, concerns, or privacy-related requests, contact our Data Privacy Officer:

Email: support@ziraptech.net
Official Website: www.ziraptech.net