Privacy Policy

This Privacy Policy describes what data Daily Trade collects, how we use it, and what control you have over it. We tried to write it in plain English instead of legalese.

1. What We Collect

• Account information: email address, display name, an optional phone number, and a bcrypt-hashed password. We never store your plaintext password.
• API credentials: the API key and secret you provide for Bybit and/or Binance. These are stored AES-256 encrypted in our database. We do not keep a master plaintext copy.
• Bot configuration: capital amount, grid step percentage, grid levels, and which bots you've enabled.
• Trading activity: orders placed, fills executed, roundtrips closed. This data exists so you can see your own dashboard.
• Technical logs: IP address (for session security), browser user-agent, last login time.
• Language preference: whether you use English or Arabic.

2. What We DON'T Collect

• Your funds. They never leave your exchange. We are not a custodian.
• Your full name or government ID (unless you choose to use them as your display name).
• Payment information. The Service is free during the closed beta.
• Browsing activity outside Daily Trade.
• Marketing or tracking pixels from third parties.

3. How We Use Your Data

Your data is used exclusively to operate the Service:

• Authenticate your account on each login.
• Pass your API credentials to your dedicated bot process so it can place orders on your behalf.
• Display your trading activity in your dashboard.
• Send you operational emails (account confirmation, security alerts). We do not send marketing emails.
• If you provide a phone number and opt in, invite you to our community channel and reach you for support. This is entirely optional.

4. Who Can See Your Data

Only you. Other users cannot see your trades, API keys, phone number, or settings. We do not sell, rent, or share your data with third parties.

The exchanges you connect (Bybit, Binance) will of course see the API calls your bot makes — that is necessary for the bot to function. Their privacy policies apply to that data on their side.

5. Security

• API keys: AES-256 encrypted at rest. Decrypted only in-memory inside your bot's isolated process.
• Passwords: bcrypt-hashed. Even we cannot read them.
• Transport: All traffic uses HTTPS via TLS certificates.
• Process isolation: Each user's bot runs in a separate process. Your keys never enter another user's environment.

That said, no online service can guarantee absolute security. Set your API keys with withdrawals disabled on the exchange — that is your last line of defense.

6. Your Rights

• Access: You can see all your data through the dashboard.
• Export: Email us to request an export of your account data.
• Delete: Email us at info@daily-trade.app to delete your account. We will erase your data from our systems. You can also revoke your API key on the exchange at any time.
• Correct: Update your display name, phone, language, and bot settings directly in the dashboard.

7. Cookies

We use one session cookie to keep you logged in. We do not use tracking cookies, analytics cookies, or third-party advertising cookies.

8. Children

Daily Trade is not intended for users under 18 years old. We do not knowingly collect data from minors.

9. Data Storage

Your account data and your bot's runtime state are stored on third-party hosting providers that operate under their own privacy and security standards. We restrict access to this data to what is necessary to operate the Service.

10. Changes to This Policy

Material changes to this Privacy Policy will be announced via the dashboard or by email. The "Last updated" date at the top of this page tells you when it was most recently revised.

11. Contact

Privacy questions, data requests, or concerns? Email info@daily-trade.app.