CryptoBot Privacy Policy
Effective date: June 6, 2026
This Privacy Policy explains how we collects, uses, stores and protects information when you use CryptoBot (the "App").
Contact: zj20001029@gmail.com
1. What CryptoBot Does
CryptoBot is a non-custodial crypto portfolio, alert and strategy research assistant. Users may connect their own third-party exchange accounts through API keys. CryptoBot does not custody user funds, does not hold private keys, does not provide a cryptocurrency wallet, and does not support withdrawals.
2. Information We Collect
We may collect:
- Account information, such as username, email address, phone number if used, password authentication metadata, referral code and account status.
- Security information, such as two-factor authentication status, login records, IP address, device information and audit logs.
- Exchange API information, such as exchange name, API key label, masked API key, encrypted API secret, encrypted passphrase and detected permissions. We do not support withdrawal permissions.
- Portfolio and trading-related information, such as balances, positions, open orders, order history, trading activity, paper-trading records, DCA settings, alert rules, webhook settings, strategy settings, backtest results and risk settings.
- Subscription and payment-related information, such as plan, subscription status, purchase history and payment provider transaction metadata when applicable.
- App usage and diagnostics, such as app interactions, error logs, crash logs and performance data when collected.
- Communications, such as support requests and messages you send to us.
3. How We Use Information
We use information to:
- Create and manage user accounts.
- Authenticate users and protect account security.
- Provide portfolio tracking, alerts, strategy research, paper trading, exchange API management and risk controls.
- Process subscriptions and account entitlements when applicable.
- Send service messages, security notices and support replies.
- Detect abuse, troubleshoot problems, improve reliability and comply with legal obligations.
4. Exchange API Keys
Exchange API secrets and passphrases are encrypted before storage. Users should only create exchange API keys with the minimum permissions required. CryptoBot does not support withdrawal permissions and cannot withdraw funds through user API keys.
5. AI and Automated Analysis
When AI-assisted features are used, portfolio summaries, strategy settings, market context, user prompts or related trading context may be processed by AI service providers to generate analysis. Users should not enter sensitive personal information into strategy prompts or support messages.
6. Sharing of Information
We do not sell user personal information. We may share information with service providers that help us operate the App, including cloud hosting, database, email, push notification, analytics, payment, AI, security and customer support providers. These providers process information to provide services to us.
We may also disclose information if required by law, regulation, legal process or to protect the rights, safety and security of users, the App or others.
7. Data Security
We use technical and organizational safeguards such as encryption in transit, encrypted storage for sensitive exchange API credentials, access controls and audit logging. No method of transmission or storage is completely secure.
8. Data Retention
We retain information for as long as needed to provide the App, comply with legal obligations, resolve disputes, enforce agreements, maintain security and keep business records. Some data may be retained in backups or audit logs for a limited period after deletion.
9. Account and Data Deletion
Users may request deletion of their CryptoBot account and associated data at:
https://app.wentflow.com/delete-account
After verifying the request, we will delete or anonymize account data unless retention is required for legal, security, fraud prevention, dispute resolution or compliance reasons.
10. International Processing
Your information may be processed in countries other than your country of residence. Data protection laws may differ from those in your jurisdiction.
11. Children's Privacy
CryptoBot is intended for adults and is not directed to children. Users must be at least 18 years old or the age of legal majority in their jurisdiction.
12. Changes
We may update this Privacy Policy from time to time. The updated version will be posted with a new effective date.
13. Contact
If you have questions, contact: