Cryptera Privacy Policy

1. Scope of this Privacy Policy

This Privacy Policy applies to personal data processed through:

• the Cryptera website and application;
• your Cryptera user account;
• connected cryptocurrency exchange accounts;
• automated strategies and backtests;
• notifications and support communications;
• security, diagnostic and operational systems.

This Privacy Policy does not govern the independent processing activities of cryptocurrency exchanges, Telegram, email providers or other third-party services.

2. Data controller

Cryptera determines the purposes and means of processing personal data described in this Privacy Policy and acts as the data controller for that processing.

Questions, requests and complaints concerning personal data may be sent to: support@mail.crypteraapp.com .

3. Information you provide

We may collect information that you provide directly when creating or using a Cryptera account.

This information may include:

• your email address;
• your account name or display name;
• authentication credentials in protected form;
• your preferred language and notification settings;
• exchange account names or labels;
• strategy parameters selected by you;
• Telegram identifiers provided when enabling notifications;
• messages, requests and attachments sent to customer support;
• feedback, bug reports and other communications.

You should not provide personal data that is unnecessary for the use of the Service.

4. Exchange account information

When you connect a supported cryptocurrency exchange account, Cryptera may process information received through the exchange API.

This information may include:

• exchange account identifiers;
• API key identifiers and related metadata;
• asset balances;
• available and reserved amounts;
• orders and order statuses;
• executed trades;
• transaction history;
• trading fees;
• supported symbols and market information;
• API permission and account-status information;
• exchange error responses.

Cryptera does not need access to your exchange password.

You must not provide an API key that permits withdrawals, external transfers or management of withdrawal addresses.

5. API credentials

To provide automated functionality, Cryptera may store API credentials issued by a supported exchange.

API credentials are used only to perform actions permitted by the configuration of the key and required for the Service, such as:

• retrieving balances and account information;
• retrieving orders and transaction history;
• submitting supported spot orders;
• checking order execution status;
• verifying API permissions and connectivity.

We apply reasonable technical and organisational safeguards to stored credentials, including encryption where applicable and restricted application access.

However, no storage or transmission method can be guaranteed to be completely secure. You may revoke an API key at any time directly through the exchange.

6. Strategy, order and portfolio data

When you use automated strategies, Cryptera may create and process:

• strategy names and configuration parameters;
• selected trading symbols;
• purchase amounts and drawdown levels;
• cooldown periods and execution conditions;
• strategy activation and suspension timestamps;
• generated signals;
• submitted orders and exchange order identifiers;
• order execution results;
• portfolio snapshots and calculated asset values;
• strategy performance and activity history;
• backtest settings and results.

This information is processed to provide the functionality requested by you, maintain an activity history, investigate errors and display the current status of your account and strategies.

7. Information collected automatically

When you access or use the Service, certain technical information may be collected automatically.

This may include:

• IP address;
• request date and time;
• requested URL and HTTP method;
• browser type and user-agent information;
• device and operating-system information;
• referring page where available;
• session and authentication identifiers;
• application actions and security events;
• response status and processing duration;
• error messages and diagnostic information.

This information is used to operate the Service, maintain security, investigate incidents, prevent abuse and diagnose technical problems.

8. Cookies and local storage

Cryptera may use cookies or similar browser storage that are necessary for the operation and security of the Service.

These technologies may be used to:

• maintain your authenticated session;
• protect requests against cross-site request forgery;
• remember security-related state;
• preserve interface or language preferences;
• prevent abuse and unauthorised access.

Essential cookies are required for authenticated functionality and cannot be disabled through Cryptera without affecting the operation of the Service.

Cryptera does not currently use cookies for third-party behavioural advertising.

9. How we use personal data

We may use personal data to:

• create and maintain your Cryptera account;
• authenticate you and manage active sessions;
• connect to supported exchange APIs;
• retrieve account, balance, order and transaction information;
• configure and run automated strategies;
• submit and monitor supported spot orders;
• generate backtests, reports and portfolio snapshots;
• send operational and security notifications;
• provide customer support;
• detect fraud, abuse and unauthorised access;
• investigate errors and security incidents;
• maintain logs and service reliability;
• improve the functionality and usability of Cryptera;
• comply with applicable legal obligations;
• establish, exercise or defend legal claims.

10. Legal bases for processing

Depending on the circumstances and applicable law, personal data may be processed on one or more of the following legal bases:

• Performance of a contract: processing necessary to provide the Service requested by you and perform the Cryptera Terms of Use.
• Legitimate interests: processing necessary to secure, maintain, diagnose and improve the Service, prevent abuse and protect users and Cryptera.
• Legal obligations: processing necessary to comply with applicable laws, lawful requests and regulatory requirements.
• Consent: processing based on your consent where consent is specifically requested and may be withdrawn.
• Legal claims: processing necessary to establish, exercise or defend legal rights.

Where processing is based on legitimate interests, we consider whether those interests are overridden by your rights and freedoms.

11. Notifications and service communications

Cryptera may send communications relating to:

• account registration and verification;
• authentication and security events;
• strategy activation, suspension or errors;
• submitted or completed orders;
• portfolio snapshots;
• exchange connection problems;
• changes to the Terms or Privacy Policy;
• customer-support requests;
• important operational announcements.

Communications may be delivered by email, Telegram or through the Service, depending on the functionality enabled by you.

Some operational and security messages are necessary to provide the Service and may not be treated as optional marketing messages.

12. Telegram notifications

If you enable Telegram notifications, Cryptera may process your Telegram user or chat identifier and information necessary to send requested messages.

Notification content may include information about:

• your connected account;
• portfolio balances and values;
• strategy activity;
• orders and execution results;
• errors and security events.

Telegram independently processes messages and account information according to its own terms and privacy policy.

You should enable Telegram notifications only if you are comfortable receiving potentially sensitive financial and account information through Telegram.

13. Email communications

Cryptera may use third-party email infrastructure to send and receive account, security, operational and support messages.

Information processed by an email provider may include:

• sender and recipient email addresses;
• message subject and content;
• delivery timestamps and status;
• technical delivery information;
• bounce, rejection and complaint information;
• IP addresses and mail-server information.

Email messages should not contain exchange passwords, unrestricted API credentials, recovery codes or other unnecessary secrets.

14. Sharing of personal data

We may share personal data only where reasonably necessary for the purposes described in this Privacy Policy.

Recipients may include:

• supported cryptocurrency exchanges when you connect and use an exchange account;
• hosting, infrastructure, database and monitoring providers;
• email-delivery and customer-communication providers;
• Telegram when you enable Telegram notifications;
• security, logging and error-monitoring providers;
• professional advisers where reasonably necessary;
• public authorities where disclosure is legally required;
• a successor operator in connection with a transfer, reorganisation or continuation of the Service.

Service providers are permitted to process information only for the relevant services they provide and subject to applicable contractual and legal obligations.

15. No sale of personal data

Cryptera does not sell, rent or trade your personal data to data brokers or advertisers.

16. International data transfers

Cryptera and its service providers may process information in countries other than your country of residence.

These countries may have data-protection laws that differ from the laws of your jurisdiction.

Where required by applicable law, we use reasonable safeguards for international transfers, which may include adequacy decisions, contractual protections or other recognised transfer mechanisms.

17. Data retention

We retain personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy.

Retention periods may depend on:

• whether your Cryptera account remains active;
• whether a connected strategy remains active;
• the type and sensitivity of the information;
• security and fraud-prevention requirements;
• the need to investigate errors or disputes;
• backup and disaster-recovery cycles;
• applicable legal and regulatory requirements;
• the establishment, exercise or defence of legal claims.

Some order, transaction and security records may be retained after account closure where reasonably necessary for security, dispute resolution, legal compliance or the integrity of historical records.

When data is no longer required, it may be deleted, anonymised or securely isolated until deletion from backup systems.

18. Data security

We use reasonable technical and organisational measures intended to protect personal data against unauthorised access, alteration, disclosure, loss or destruction.

These measures may include:

• encryption of sensitive stored information where applicable;
• encrypted network connections;
• restricted access to production systems;
• authentication and session controls;
• logging and monitoring of security events;
• backups and recovery procedures;
• minimum-permission requirements for exchange API keys;
• software updates and vulnerability remediation.

No system can be guaranteed to be completely secure. You are also responsible for securing your devices, email account, Telegram account, Cryptera password and exchange API credentials.

19. Personal-data incidents

If we become aware of a personal-data incident, we may investigate, contain and remediate the incident and take other steps required by applicable law.

Where legally required, affected users and the competent supervisory authority may be notified.

20. Your rights

Depending on applicable law and the circumstances, you may have the right to:

• request confirmation that we process your personal data;
• request access to your personal data;
• request correction of inaccurate or incomplete data;
• request deletion of personal data;
• request restriction of processing;
• object to certain processing;
• withdraw consent where processing is based on consent;
• request a portable copy of certain data;
• submit a complaint to a competent supervisory authority;
• obtain information about relevant safeguards for international transfers where applicable.

These rights may be subject to legal limitations and exceptions. For example, we may retain information where required for security, legal compliance or the defence of legal claims.

Requests may be sent to: support@mail.crypteraapp.com .

21. Identity verification

Before fulfilling a personal-data request, we may ask for information reasonably necessary to verify your identity and protect your account.

We will not request unrestricted exchange API credentials, exchange passwords or cryptocurrency seed phrases to verify your identity.

22. Account deletion

You may request deletion of your Cryptera account by contacting support.

Before requesting deletion, you should:

• stop active strategies;
• review open orders directly on the exchange;
• revoke the Cryptera API key through the exchange;
• save any records you wish to retain.

Deleting a Cryptera account does not:

• cancel orders already submitted to an exchange;
• reverse completed transactions;
• delete records independently retained by an exchange;
• require immediate deletion of information that we must or may lawfully retain.

Data may remain temporarily in backups and security logs until the applicable retention cycle expires.

23. Automated decisions

Cryptera strategies automatically evaluate configured market conditions and may submit orders according to parameters selected by you.

This automation is part of the Service requested by you and is not used to determine your eligibility for employment, credit, insurance, housing or similar services.

You control whether a strategy is activated and are responsible for reviewing its parameters and activity.

24. Children

Cryptera is not intended for persons under 18 years of age.

We do not knowingly collect personal data from children. If you believe that a person under 18 has provided personal data to Cryptera, please contact us so that we can investigate and take appropriate action.

25. Third-party links and services

The Service may contain links to exchanges, Telegram or other third-party websites and services.

Those third parties independently determine how they process personal data. You should review their terms and privacy policies before using their services.

26. Changes to this Privacy Policy

We may update this Privacy Policy to reflect changes in the Service, processing activities, security practices, legal requirements or third-party integrations.

The updated version will be published with a revised effective date and version number.

Where changes are material, we may provide additional notice through the Service, email, Telegram or another reasonable communication channel.

27. Complaints

If you have a concern about how Cryptera processes personal data, please contact us first so that we can investigate and attempt to resolve it.

You may also have the right to submit a complaint to the data-protection authority responsible for your place of residence, place of work or the location of an alleged infringement.