Privacy Policy

Trade Cycle Bot, [email protected], is responsible for the Trade Cycle Bot commercial portal.

Data we process

We may process name, surname, email, account identifiers, password hashes, verification status, IP addresses, user agent, security/audit logs, subscription and invoice identifiers, PayPal payer/subscription identifiers and, if enabled, Stripe customer/subscription identifiers, installation ID, server domain/IP, service identifiers, server domain/IP, license status, software version and technical service-status information. Payment credentials, full card numbers and CVV are processed by PayPal and/or the enabled payment provider and are not stored by TCB.

Purposes

We use data to create and secure accounts, authenticate users, process subscriptions, provision and administer service, prevent abuse, provide support, synchronize documentation, manage licenses, recover terminated installations during the retention period, comply with law and establish or defend legal claims.

Third-party processors and transfers

Service operation may involve PayPal, optional Stripe services, DigitalOcean, DNS/CDN providers such as Cloudflare, transactional email providers and other hosting/monitoring vendors. Their locations and subprocessors may involve international transfers subject to applicable safeguards.

Trading credentials

Exchange API credentials may be stored on the customer’s TCB server in encrypted form where the installed version supports it. We recommend exchange IP whitelisting and minimal API permissions. The commercial portal does not require exchange secret keys for account registration or subscription billing.

Retention

Account, billing and audit records are retained for the period reasonably required for service, security, accounting and legal obligations. After service termination, a backup containing server data may be retained for up to six months for recovery and then permanently deleted. Billing records may be retained longer when law requires it.

Security

We use technical and organizational security measures including password protection, secure sessions, encrypted transport and access controls. No security measure eliminates all risk.

Rights

Subject to applicable law, users may request access, correction, deletion, restriction, objection or portability and may withdraw consent where consent is the legal basis. Requests can be sent to [email protected]. Mandatory accounting, fraud-prevention or legal-retention obligations may limit deletion.

Changes

Material changes will be versioned and may require renewed acknowledgement.