Privacy Policy

1. Who we are

GeekTrade ("we", "us") operates the GeekTrade service (the "Service"). We are the data controller for the personal data we collect in connection with the Service. Contact details are provided at the end of this policy.

2. Data we collect

We collect and process the following in connection with the Service:

• Account data: email address, password (stored in hashed form), and when you use "Sign up with Google", the identifier and email (and optionally name) provided by Google.
• Exchange and trading data: exchange API keys and secrets, bot and group configuration, and data necessary to execute and log trades (e.g. symbol, side, size). This data is stored in our database to provide the Service.
• Usage and technical data: logs of requests, errors, and performance; cookie and similar technologies as described in our cookie notice (see section 8 and the "Cookie preferences" link on the site).

3. Purposes and legal basis

We use your data to: provide and operate the Service; authenticate you; execute and log trades per your configuration; communicate with you about the Service; improve and secure the Service; and comply with legal obligations. Our legal basis for processing (where applicable under GDPR) is performance of our contract with you, your consent (e.g. for non-essential cookies), and our legitimate interests in operating and improving the Service. We do not sell your personal data.

4. Retention

We retain account and exchange/trading data for as long as your account is active and as needed to provide the Service and comply with law. After you delete your account or ask us to delete your data, we will delete or anonymize it within a reasonable period, except where we must retain it for legal, security, or fraud-prevention reasons.

5. Sharing and processors

We use service providers who process data on our behalf (e.g. hosting, database, authentication). These include Supabase (database and auth) and Vercel (hosting). When we send orders to an exchange (e.g. Bybit), we use the API credentials you provided; we do not share your personal data with exchanges for their marketing. We do not sell or share your personal data for third-party advertising. We may disclose data if required by law or to protect our rights and safety.

6. International transfers

Your data may be processed in the United States or other countries where our service providers operate. If you are in the European Economic Area or the UK, we rely on appropriate safeguards (such as adequacy decisions or standard contractual clauses) where required by law for such transfers.

7. Your rights

Depending on where you live, you may have the right to: access your personal data; correct inaccurate data; request deletion; request a copy (portability); object to or restrict certain processing; withdraw consent where processing is based on consent; and lodge a complaint with a supervisory authority. To exercise these rights, contact us using the details below. We will respond within the time required by applicable law (e.g. one month under GDPR). If you are in California, we do not sell personal information; you may have additional rights under the CCPA/CPRA.

8. Cookies

We use cookies and similar technologies for essential operation (e.g. session, authentication) and, with your consent, to improve the Service. You can change your preference at any time via the "Cookie preferences" link in the footer.

9. Security

We take reasonable technical and organizational measures to protect your data. You are responsible for keeping your account credentials and API keys secure.

10. Changes

We may update this Privacy Policy from time to time. We will post the updated policy on this page and update the "Last updated" date. Material changes may be communicated via the Service or email.

11. Contact

For privacy-related requests (access, correction, deletion, portability, objection, or complaints), contact us via the channels listed on our website (e.g. Telegram, support email). We will process your request in accordance with applicable law.