PRIVACY POLICY
Last Updated: January 21, 2025
We take your privacy seriously. This policy explains how we collect, use, and protect your information.
1. Information We Collect
Account Information
When you create an account, we collect:
- • Email address
- • Username and password (encrypted)
- • Profile information (if provided)
- • Payment information for token purchases
Trading Information
To provide our Services, we collect:
- • Exchange API keys (encrypted with AES-256-GCM)
- • Trading strategies you create
- • Deployment configurations and settings
- • Trading performance data and analytics
- • Wallet addresses for ALR token transactions
Usage Information
We automatically collect:
- • IP address and device information
- • Browser type and version
- • Pages visited and features used
- • Timestamps of activities
- • Referral sources
AI Interactions
When you use our AI features:
- • Chat messages and strategy descriptions
- • Generated code and strategies
- • Feedback and ratings
2. How We Use Your Information
We use your information to:
- •Provide Services: Execute trades, generate strategies, manage deployments, and provide customer support
- •Improve AI Models: Use anonymized strategy data to train and improve our AI models
- •Security: Detect and prevent fraud, abuse, and unauthorized access
- •Communications: Send service updates, security alerts, and marketing communications (with your consent)
- •Analytics: Analyze usage patterns to improve platform performance and user experience
- •Compliance: Meet legal and regulatory obligations
3. Data Security
We implement industry-standard security measures to protect your data:
Encryption
- • AES-256-GCM encryption for API keys at rest
- • TLS 1.3 for data in transit
- • Bcrypt password hashing with salt
Access Controls
- • Multi-factor authentication (MFA) support
- • Role-based access control (RBAC)
- • Regular security audits and penetration testing
- • Principle of least privilege for internal access
Infrastructure Security
- • Secure cloud infrastructure (Digital Ocean, AWS)
- • Database encryption and regular backups
- • DDoS protection and rate limiting
- • Continuous monitoring and intrusion detection
Important: While we implement robust security measures, no system is 100% secure. You are responsible for maintaining the security of your account credentials and exchange API keys.
4. Data Sharing and Disclosure
We do NOT sell your personal information. We may share data with:
Service Providers
Third-party vendors who help us provide Services (cloud hosting, payment processing, analytics). These providers are contractually obligated to protect your data.
Exchange Partners
We transmit encrypted API keys to execute trades on your behalf through supported exchanges (Binance, Coinbase Pro, LMEX).
Legal Requirements
When required by law, court order, or government request, or to protect our rights, safety, or property.
Business Transfers
In connection with a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.
Aggregated Data
We may share anonymized, aggregated data that does not identify you personally for research, marketing, or analytics purposes.
5. Cookies and Tracking Technologies
We use cookies and similar technologies to:
- • Maintain your login session
- • Remember your preferences and settings
- • Analyze usage patterns and improve Services
- • Provide personalized content and recommendations
- • Measure advertising effectiveness (if applicable)
You can control cookies through your browser settings. Note that disabling cookies may limit functionality of the Services.
6. Your Privacy Rights
Depending on your jurisdiction, you may have the right to:
- •Access: Request a copy of the personal information we hold about you
- •Correction: Request correction of inaccurate or incomplete information
- •Deletion: Request deletion of your personal information (subject to legal retention requirements)
- •Portability: Request a copy of your data in a machine-readable format
- •Object: Object to processing of your data for certain purposes
- •Opt-Out: Unsubscribe from marketing communications
To exercise these rights, contact us at privacy@alric.io
7. Data Retention
We retain your information for as long as necessary to:
- • Provide Services to you
- • Comply with legal obligations (e.g., tax records, audit trails)
- • Resolve disputes and enforce agreements
- • Improve our AI models (using anonymized data)
When you close your account, we will delete or anonymize your personal information within 90 days, except where retention is required by law or for legitimate business purposes.
8. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws than your jurisdiction.
We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy, including using standard contractual clauses approved by regulatory authorities.
9. Children's Privacy
Our Services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child without parental consent, we will take steps to delete that information.
10. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.
We will notify you of material changes by posting the updated policy on our website and updating the "Last Updated" date. We encourage you to review this policy periodically. Your continued use of the Services after changes constitutes acceptance of the updated policy.
Questions or Concerns?
If you have questions about this Privacy Policy or our data practices, please contact: