⚠ Pre-lawyer template: This document is a starting-point template generated by software. It has NOT been reviewed by a licensed attorney. Before relying on it for production use, you MUST have a qualified securities / fintech lawyer in your jurisdiction review and modify it.
Privacy Policy
This Privacy Policy explains how Micro/Trade collects, uses, and protects information when you use the Service. We are committed to protecting your privacy and complying with applicable laws including the California Consumer Privacy Act (CCPA) and, where applicable, the EU General Data Protection Regulation (GDPR).
1. Information We Collect
You provide directly
- Account info: name, email address, hashed password.
- Exchange API credentials: encrypted at rest. We never see your withdraw-enabled keys; you must not provide them.
- Payment metadata: Stripe customer/session IDs only. Card details are handled by Stripe; we never see your card number.
- Communications: support emails and inquiries you send us.
Collected automatically
- Bot configurations, trade history, portfolio values you generate on the Service.
- Session cookies for authentication (httpOnly, SameSite=Lax).
- Standard server logs (IP, user agent, timestamps) for security and abuse prevention, retained for 30 days.
We do not use third-party analytics, tracking pixels, or advertising cookies at this time.
2. How We Use Your Information
- To provide, secure, and improve the Service;
- To process payments and prevent fraud;
- To compute anonymized aggregate statistics (no individual user is identifiable);
- To communicate with you about account, billing, and updates;
- To comply with legal obligations and respond to lawful requests.
3. Sharing
We do not sell your personal information. We share data only with:
- Service providers we use to operate (Stripe, MongoDB hosting, AI API providers) under contracts that restrict their use of the data to providing the Service.
- Law enforcement when required by valid legal process.
- An acquirer in the event of a merger or asset sale, with notice to you.
4. Data Security
We use industry-standard practices, including bcrypt password hashing, Fernet encryption for exchange API keys, TLS in transit, and JWT-based session tokens. No system is perfectly secure, however; you acknowledge and accept residual risk.
5. Your Rights
- Access & portability: use the in-app data export to download all data we hold about you.
- Deletion: delete your account from Settings; we will permanently remove your personal data, subject to legal retention obligations.
- Correction: update your name and email in Settings.
- Opt out of sale: we do not sell personal information.
- EU/UK residents have additional GDPR rights and may contact us or your local data-protection authority.
- California residents have CCPA rights including the rights described above.
To exercise any right, email legal@microtrade.io.
6. Children
The Service is not directed to children under 18. We do not knowingly collect information from children.
7. International Transfers
We operate in the United States. If you access the Service from outside the U.S., you consent to the transfer of your data to the U.S. and other jurisdictions where our service providers operate.
8. Data Retention
We retain account data while your account is active. Server logs are retained for 30 days. Financial transaction records may be retained longer to satisfy tax and accounting obligations. Deleted-account data is purged permanently within 30 days, except where retention is legally required.
9. Changes
Material changes to this Policy will be announced via email or in-app notice prior to taking effect.
10. Contact
Email legal@microtrade.io for any privacy question, request, or complaint.