Privacy Policy

Last updated: May 2026

1Who We Are

BotifyTrades LLP ("we," "us," "our") is registered in India and operates the botifytrades.com platform and desktop trading automation software. We process personal data as a Data Fiduciary under India's Digital Personal Data Protection Act 2023 and as a controller under applicable US state privacy laws.

2Information We Collect

• Account data: Email address, display name, and hashed password when you sign up.
• OAuth data: When you sign in with Google or Discord, we receive your name, email, and avatar from the provider. We do not receive your password.
• Payment data: Processed by Stripe. We store your Stripe customer ID and subscription status but never your card number or payment method details.
• Trading data: When you pair a desktop bot, positions, trades, alerts, and account status are relayed to our servers for dashboard display. This data is stored on US-based servers.
• Usage data: Login timestamps, subscription events, bot pairing activity, and IP addresses.
• Device identifiers: Machine ID for license verification purposes.
• Compliance logs: Immutable audit trail of trading events, commands, and data access for regulatory compliance.

3Information We Do NOT Collect

• Brokerage credentials — OAuth tokens, API keys, and passwords for your brokerage accounts are stored locally on your machine. They are never transmitted to or stored on our servers.
• Discord messages — Signal processing happens locally in the desktop bot. Message content is not sent to our servers.
• Brokerage account numbers or balances — We do not access or store your brokerage account details.

4How We Use Your Information

• To provide and maintain the Service, including the web dashboard and mobile companion.
• To process payments and manage subscriptions via Stripe.
• To send transactional emails (verification, password reset, subscription receipts).
• To pair your desktop bot and enable remote monitoring and control.
• To maintain compliance audit trails as required by financial regulations.
• To detect and prevent unauthorized access to your account.

5Legal Basis for Processing

• Contract performance: Processing your account, subscription, and trading data is necessary to provide the Service you subscribed to.
• Consent: When you register and pair a bot, you explicitly consent to trading data collection. You may withdraw consent at any time by deleting your trading data through the dashboard.
• Legitimate interest: Security logging, fraud prevention, and compliance audit trails.
• Legal obligation: Immutable audit records are retained to comply with financial recordkeeping requirements.

6Data Sharing

We do not sell, rent, or trade your personal information. We share data only with:

• Stripe — Payment processing. Stripe's privacy policy governs payment data.
• SendGrid — Transactional email delivery only.
• Google / Discord — Only during OAuth sign-in flows initiated by you.

We do not use tracking cookies, analytics services, or advertising networks.

7Data Storage & Security

• Your data is stored on servers located in the United States.
• Passwords are hashed with bcrypt (irreversible).
• Sessions use httpOnly cookies with secure flags.
• All traffic is encrypted via HTTPS/TLS.
• Broker credentials are encrypted with Fernet (AES-128-CBC) on your local machine and never leave it.
• Compliance audit logs use SHA-256 hash chaining for tamper detection.

8Data Retention

• Account data: Retained while your account is active. Deleted upon account deletion.
• Trading data: Retained while your account is active. You can delete all trading data at any time via the dashboard.
• Compliance audit logs: Retained for a minimum of 6 years in anonymized form, as required by financial recordkeeping regulations (SEC Rule 17a-4, MiFID II RTS 6).
• Payment records: Retained as required by tax and accounting regulations.

9Your Rights

Depending on your jurisdiction, you may have the following rights:

• Access: Request a copy of your personal data. Use the "Export My Data" feature in the dashboard or contact support.
• Correction: Update your account information through the dashboard settings.
• Deletion: Delete your trading data via the dashboard Data & Privacy section. Request full account deletion by contacting support.
• Data portability: Export your data in JSON format through the dashboard.
• Withdraw consent: You may withdraw consent for trading data collection at any time by unpairing your bot and deleting your trading data.
• Complaint: You have the right to lodge a complaint with a data protection authority in your jurisdiction.

10Cross-Border Data Transfers

BotifyTrades LLP is registered in India and operates servers in the United States. Your personal data may be processed in jurisdictions outside your country of residence. By using the Service, you consent to the transfer of your data to the United States for processing and storage. We implement appropriate safeguards for cross-border transfers.

11Children's Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal data from minors. If you are under 18, do not use the Service. Trading in financial markets requires you to be of legal age in your jurisdiction.

12Cookies

We use essential cookies only for authentication (session, access token, refresh token). We do not use tracking, analytics, or advertising cookies.

13Data Breach Notification

In the event of a data breach affecting your personal information, we will notify affected users by email within 72 hours of discovery and notify relevant data protection authorities as required by applicable law.

14Changes

We may update this policy. We will notify you of material changes via email. Continued use of the Service after changes constitutes acceptance.

15Contact

For privacy questions, data requests, or complaints, contact us at support@botifytrades.com