Privacy Policy

This Privacy Policy describes how AlgoVesta ("we," "us," "our") collects, uses, stores, and protects personal information when you access or use our AI-powered cryptocurrency trading automation platform, including our website, dashboard, Telegram integrations, API services, and any related tools or applications (collectively, the "Platform").

This policy applies to all users of the Platform worldwide, regardless of geographic location. We are committed to complying with all applicable data protection laws and regulations, including but not limited to the General Data Protection Regulation (GDPR) of the European Union, the California Consumer Privacy Act (CCPA), and other relevant data privacy frameworks in the jurisdictions where we operate.

AlgoVesta is operated by [PENDING SL REGISTRATION], a Spanish Sociedad Limitada (S.L.) currently in formation under Spain's Entrepreneurs Law (Ley 14/2013). Company registration number: [PENDING SL REGISTRATION]. Registered office: [PENDING SL REGISTRATION], Spain. AlgoVesta operates within the European Union legal framework, including the Markets in Crypto-Assets Regulation (MiCA) and applicable Crypto-Asset Service Provider (CASP) provisions.

Jurisdiction: Spain (European Union — MiCA/CASP framework). By using our Platform, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of our services immediately.

This Privacy Policy should be read in conjunction with our Terms of Service and Cookie Policy, which together govern your use of the AlgoVesta Platform.

We collect various categories of information in order to provide, maintain, and improve the AlgoVesta Platform. The types of information we collect depend on how you interact with our services.

We use the information we collect for the following purposes, all of which are essential to delivering a secure, reliable, and high-quality trading automation service:

• Platform Operation: To provide, operate, and maintain the AlgoVesta Platform, including user authentication, dashboard rendering, and account management.
• Workflow Execution: To apply your pre-configured automation rules via your connected exchange API keys, in accordance with the trading strategies and parameters you configure.
• Automation & Execution Analytics: To execute the automation rules and signals you configure, and to provide execution analytics, performance reporting, and platform diagnostics for your account.
• Communication: To send you essential service communications including security alerts, account notifications, trade confirmations, system updates, and scheduled AI performance reports via email and Telegram.
• Platform Improvement: To analyze usage patterns, identify performance bottlenecks, improve our algorithms, and enhance overall user experience through aggregated and anonymized analytics.
• Fraud Prevention: To detect, investigate, and prevent fraudulent activity, unauthorized access, abuse of our systems, and violations of our Terms of Service.
• Legal Compliance: To comply with applicable laws, regulations, legal processes, and enforceable governmental requests in the jurisdictions where we operate.

We share data with third-party service providers only to the extent necessary to operate the Platform. Each third party receives only the minimum data required for its specific function. Below is a comprehensive list of our third-party data processors and the purpose of each integration:

We may also disclose your information if required by law, subpoena, court order, or governmental regulation, or if we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.

We take the security of your personal data seriously and implement a comprehensive set of technical and organizational measures to protect it against unauthorized access, alteration, disclosure, or destruction.

• Encryption at Rest: All exchange API keys and sensitive credentials are encrypted using AES-256 encryption before being stored in our database.
• Encryption in Transit: All data transmitted between your browser and our servers is protected with TLS 1.3 encryption, ensuring end-to-end security during data transfer.
• No Plaintext Storage: API keys are never stored in plaintext and are never written to application log files, debug output, or error reports.
• Security Audits: We conduct regular security audits and vulnerability assessments to identify and remediate potential security weaknesses in our infrastructure and codebase.
• Access Controls: We enforce the principle of least privilege across our systems, ensuring that only authorized personnel have access to sensitive data, and only to the extent necessary for their role.
• Incident Response: We maintain documented incident response procedures to detect, respond to, and recover from security incidents in a timely manner. In the event of a data breach that affects your personal information, we will notify you and relevant authorities as required by applicable law.

We retain your personal data only for as long as necessary to fulfill the purposes described in this Privacy Policy, or as required by applicable law. Our data retention practices are as follows:

• Active Account Data: Your personal information, account settings, exchange API keys, and trading preferences are retained for as long as your account remains active and you continue to use the Platform.
• Account Deletion: Upon account deletion request, all personally identifiable information is permanently purged from our primary systems within 30 days. This includes your name, email address, API keys, and account preferences.
• Trading Logs: After account deletion, trading activity logs are anonymized (stripped of all personally identifiable information) and retained for up to 90 days for platform improvement, algorithm training, and aggregate analytics purposes.
• Legal Compliance: Certain data may be retained beyond the standard deletion period if required by applicable laws, regulations, or legal proceedings. Such data will be stored securely and used only for the specific legal purpose.
• Backup Systems: Data stored in backup systems is purged within 60 days following a deletion request, as backups follow a rolling deletion cycle.

Depending on your jurisdiction, you may have certain rights regarding your personal data. AlgoVesta is committed to honoring these rights in compliance with the GDPR, CCPA, and other applicable privacy regulations. Your rights include:

• Right to Access: You have the right to request a copy of all personal data we hold about you. We will provide this information in a commonly used electronic format within 30 days of your verified request.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you. You may also update certain information directly through your account settings.
• Right to Erasure: You have the right to request the deletion of your personal data, subject to certain legal exceptions. Upon a valid request, we will delete your data in accordance with our Data Retention policy described in Section 6.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format (such as JSON or CSV), and to transmit that data to another service provider without hindrance.
• Right to Object: You have the right to object to certain types of data processing, including processing based on legitimate interests or processing for direct marketing purposes.
• Right to Restrict Processing: You have the right to request that we limit how we use your personal data in certain circumstances, such as when you contest the accuracy of the data or object to our processing.
• Right to Withdraw Consent: Where we process your data based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing conducted prior to withdrawal.

To exercise any of the rights described above, please contact us at support@algovesta.com. We will verify your identity before processing your request and respond within 30 days. In certain circumstances, we may need to extend this period, in which case we will notify you of the extension and the reasons for it.

AlgoVesta operates globally, and our services are provided from infrastructure located in multiple jurisdictions. As a result, your personal data may be transferred to, stored in, and processed in countries other than the country in which you reside. These countries may have data protection laws that differ from the laws of your jurisdiction.

When we transfer personal data internationally, we ensure that adequate safeguards are in place to protect your data in compliance with applicable data protection laws. These safeguards may include Standard Contractual Clauses (SCCs) approved by the European Commission, data processing agreements with our service providers, and compliance with applicable data transfer frameworks.

Where personal data is transferred outside the European Economic Area, we rely on appropriate safeguards under Chapter V GDPR, including the European Commission's Standard Contractual Clauses (SCCs) and, where applicable, adequacy decisions.

By using the AlgoVesta Platform, you acknowledge and consent to the transfer of your personal data to countries outside your country of residence as described in this Privacy Policy. If you have concerns about international data transfers, please contact us at support@algovesta.com.

The AlgoVesta Platform is NOT intended for use by anyone under 18 years of age. Cryptocurrency trading carries significant financial risk and is not appropriate for minors. We do not knowingly collect, solicit, or process personal information from individuals under the age of 18.

If we become aware that we have collected personal data from a minor without verification of parental consent, we will take immediate steps to delete that information from our servers. If you are a parent or guardian and believe that your child has provided us with personal data, please contact us at support@algovesta.com so that we can take appropriate action.

AlgoVesta uses cookies and similar technologies (such as local storage and session storage) to enhance your experience on our Platform. Cookies help us remember your preferences, keep you logged in, provide essential security functions, and understand how you interact with our services.

For detailed information about the specific cookies we use, their purposes, durations, and how to manage your cookie preferences, please refer to our comprehensive Cookie Policy.

You can manage cookie preferences through your browser settings. Please note that disabling essential cookies may prevent certain features of the Platform from functioning correctly.

We may update this Privacy Policy periodically to reflect changes in our data practices, legal requirements, or operational needs. When we make changes, we will revise the "Last Updated" date at the top of this page.

For material changes that significantly affect how we collect, use, or share your personal data, we will provide prominent notice through one or more of the following methods: an email notification to the address associated with your account, a prominent notice on our Platform dashboard, or a Telegram notification if you have enabled our Telegram bot.

Your continued use of the AlgoVesta Platform after the effective date of any changes constitutes your acceptance of the revised Privacy Policy. If you do not agree with the updated terms, you should discontinue use of the Platform and request account deletion. Previous versions of this Privacy Policy are available upon request by contacting support@algovesta.com.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please do not hesitate to contact us. We take all privacy inquiries seriously and are committed to resolving them promptly.

We aim to respond to all privacy-related inquiries within 30 days. For GDPR and CCPA data subject requests, we will acknowledge receipt within 48 hours and provide a substantive response within the legally required timeframe. If you are unsatisfied with our response, you have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD) or with the supervisory authority of your EU country of residence.