Privacy Policy

This Privacy Policy explains how tr8d.net ("tr8d", "we", "us", "the Platform") collects, uses, stores, and protects information when you use the Platform. We are a non-custodial algorithmic-trading software tool: our design philosophy is to collect the minimum information required to operate, and to keep your keys and funds under your control at all times.

1. Information We Collect

Category	What we store	Why
Account	Email address, password (scrypt-hashed with a per-user salt — never plain text), account tier, signup date	To create and secure your account
Session	An opaque session token stored in your browser's local storage	To keep you signed in between visits
Exchange API key	Your Binance API key + secret, AES-256-GCM encrypted at rest; decrypted in memory only while your bot is running	To place trades on the exchange you connect
Wallet	Public wallet address + chain (EVM/TRON/Solana) only — never a private key or seed phrase	To associate your self-custody wallet with your account
Usage / configuration	Your bot settings (strategy, pair, quantity), recent trade records generated by the engine	To operate your configured trading engine

We do not collect: your name, physical address, government ID, payment card details, private keys, seed phrases, or any biometric data.

2. Information We Do NOT Collect

• Private keys / seed phrases. We actively reject any input that resembles one. If you are ever asked for your seed phrase or private key, it is not tr8d — stop immediately.
• Funds. We are non-custodial. Your assets remain in your exchange account or wallet at all times. We have no deposit mechanism and cannot move your funds.
• Tracking / analytics. We do not use Google Analytics, Meta Pixel, or any third-party advertising or cross-site tracking.
• Cookies. We do not set advertising or tracking cookies. Authentication uses local storage, not cookies.

3. How We Use Information

We use the information we collect solely to operate the Platform:

• To create, authenticate, and secure your account.
• To run the automated trading engine against the exchange you connect.
• To display your connected wallet address and balance.
• To provide support and respond to enquiries.
• To maintain the security and integrity of the Platform.

We do not use your information for marketing, profiling, or any purpose unrelated to operating the Platform.

4. Third-Party Services

Your information is shared only where strictly necessary to provide the service:

Third party	What is shared	Purpose
Binance	Your API key (only when you connect it) + order instructions	To place trades and read your account, per your configuration
Market-data providers (Binance / CoinGecko public APIs)	No personal information — only public market queries	To fetch live prices and charts
unpkg.com / jsdelivr.net	None (static JS libraries loaded by your browser)	To load charting and wallet libraries

We do not sell, rent, or trade personal information, and we do not share it with advertisers or data brokers.

5. Data Storage & Security

• Encryption. Exchange API secrets are encrypted with AES-256-GCM. Passwords are scrypt-hashed with a unique salt. Data is transmitted over HTTPS/TLS.
• Storage. Account and configuration data is stored in a SQLite database on our server, protected by operating-system access controls.
• Key handling. Your API secret is decrypted in server memory only while your bot is actively running and is never transmitted back to your browser.
• No custody. Because we are non-custodial, a compromise of the Platform cannot result in the direct loss of your funds (you can revoke your API key or disconnect at any time).

No method of transmission or storage is 100% secure. While we use commercially reasonable safeguards, we cannot guarantee absolute security.

6. Data Retention & Deletion

• Your account data is retained while your account is active.
• When you disconnect an exchange or wallet, the associated credentials/address are deleted from our records.
• You may request deletion of your account and all associated data at any time by contacting us (Section 9). We will honour verifiable requests within 30 days, except where retention is required by law.

7. Your Rights

You have the right to:

• Access the personal information we hold about you.
• Correct inaccurate information.
• Delete your account and associated data.
• Withdraw consent at any time by disconnecting your exchange/wallet and deleting your account.

If you are located in Canada, these rights are consistent with the Personal Information Protection and Electronic Documents Act (PIPEDA). To exercise any right, contact us using the details in Section 9.

8. Children

The Platform is not intended for individuals under the age of 18. We do not knowingly collect information from minors.

9. Contact

For any privacy-related question or request, contact us at privacy@tr8d.net.