Privacy Policy

Last updated: February 2026

Your privacy is important to us. This Privacy Policy describes how Tradelet ("we", "us", "our") collects, uses, and protects your information when you use our platform.

1. Information We Collect

Account Information

When you register, we collect your email address, username, and a hashed version of your password. We never store passwords in plain text.

Exchange API Keys

If you connect an exchange, we store your API keys encrypted with AES-256 encryption. Keys are only decrypted in memory during trade execution and are never logged or transmitted to third parties.

Trading Data

We store your trading activity including orders, positions, signals, and strategy configurations to provide the Service functionality.

Technical Data

We may collect basic technical data such as browser type, IP address, and access timestamps for security and operational purposes.

2. How We Use Your Information

  • To provide, maintain, and improve the Service.
  • To execute trades on your behalf via connected exchanges.
  • To authenticate your identity and secure your account.
  • To send service-related communications (e.g., security alerts).
  • To detect and prevent fraud or abuse.

3. Data Sharing

We do not sell, rent, or share your personal information with third parties for marketing purposes. We may share data only in the following circumstances:

  • Exchange APIs: Your API keys are used to interact with exchanges you connect.
  • Legal compliance: We may disclose information if required by law or legal process.
  • Service providers: We may use infrastructure providers that process data on our behalf under strict confidentiality.

4. Data Security

  • AES-256 encryption for API keys at rest.
  • Bcrypt hashing for passwords.
  • JWT-based authentication with token expiration.
  • HTTPS/TLS encryption for all data in transit.
  • CORS-restricted API endpoints.

5. Data Retention

We retain your data for as long as your account is active. If you delete your account, we will remove your personal information and trading data within 30 days, except where retention is required by law.

6. Your Rights

  • Access the personal data we hold about you.
  • Request correction of inaccurate data.
  • Request deletion of your account and data.
  • Export your data in a portable format.

7. Cookies

Tradelet uses essential cookies and local storage for authentication tokens, user preferences (such as theme and chart settings), and session management. We do not use third-party tracking cookies or analytics services.

8. Children's Privacy

The Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from minors.

9. Changes to This Policy

We may update this Privacy Policy periodically. Changes will be posted on this page with an updated date.

10. Contact

For privacy-related inquiries, contact us at [email protected].