Privacy Policy

Kronos AI Trader ("Company," "we," "us," or "our") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-assisted trading platform ("Service").

We are committed to compliance with the Personal Data Protection Act (PDPA) and other applicable international data protection regulations, including GDPR principles where applicable. By using our Service, you consent to the data practices described in this policy.

2.1 Information You Provide

• Account Information: Email address, display name, profile picture (optional)
• Exchange API Credentials: API keys and secrets for connecting to cryptocurrency exchanges (encrypted at rest)
• Trading Preferences: Risk settings, strategy configurations, notification preferences
• Communication Data: Support tickets, feedback, and correspondence
• Payment Information: Subscription details processed through secure third-party payment processors

2.2 Information Collected Automatically

• Device Information: Browser type, operating system, device identifiers
• Usage Data: Pages visited, features used, timestamps, session duration
• Log Data: IP address, access times, error logs, system activity
• Trading Activity: Trade history, performance metrics, strategy execution logs
• Cookies and Tracking: Session cookies, analytics cookies (with consent)

2.3 Information from Third Parties

• Exchange Data: Account balances, trade confirmations, market data from connected exchanges
• Authentication Providers: Basic profile information if you sign in with Google or other OAuth providers

We use your personal data for the following purposes:

3.1 Service Provision

• Execute trades and manage your trading strategies
• Display account balances and trading history
• Provide real-time market analysis and AI-generated signals
• Process subscription payments and manage your account

3.2 Service Improvement

• Analyze usage patterns to improve platform features
• Train and optimize our AI trading algorithms (using aggregated, anonymized data)
• Identify and fix technical issues
• Develop new features and capabilities

3.3 Communication

• Send trading alerts and notifications (based on your preferences)
• Provide customer support and respond to inquiries
• Send important service announcements and security alerts
• Marketing communications (only with explicit consent, easily unsubscribable)

3.4 Legal and Security

• Prevent fraud and unauthorized access
• Comply with legal obligations and regulatory requirements
• Enforce our Terms of Service
• Protect the rights and safety of users and third parties

We implement industry-standard security measures to protect your personal data:

• Encryption at Rest: All sensitive data, including API keys, is encrypted using AES-256-GCM
• Encryption in Transit: All communications use TLS 1.3 encryption
• Access Control: Strict role-based access controls and principle of least privilege
• Row Level Security: Database-level security ensuring users can only access their own data
• Regular Audits: Periodic security assessments and vulnerability testing
• Secure Infrastructure: Cloud hosting with enterprise-grade security certifications

While we implement robust security measures, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security but commit to promptly notifying affected users in the event of a data breach.

We do not sell your personal data. We may share your information in the following circumstances:

5.1 Service Providers

We engage trusted third-party service providers who assist in operating our platform:

• Cloud infrastructure and hosting providers
• Payment processors (for subscription billing)
• Analytics services (using anonymized data)
• Customer support tools

All service providers are bound by data protection agreements and may only use your data as instructed by us.

5.2 Cryptocurrency Exchanges

Your API keys are used solely to communicate with your connected exchanges on your behalf. We do not share your personal information with exchanges beyond what is necessary for trade execution.

5.3 Legal Requirements

We may disclose your information if required by law, court order, or government request, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

5.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your personal data may be transferred to the acquiring entity. We will notify you of any such change.

We retain your personal data as follows:

• Account Data: Retained while your account is active, deleted within 90 days of account closure
• Trading History: Retained for 7 years for regulatory compliance and tax purposes
• API Credentials: Deleted immediately upon disconnection or account closure
• Usage Logs: Retained for 12 months for security and analytics purposes
• Support Tickets: Retained for 3 years for quality assurance

Upon request, we will delete your data sooner unless retention is required by law.

We use the following types of cookies:

• Essential Cookies: Required for platform functionality (authentication, security)
• Analytics Cookies: Help us understand how users interact with our platform (with consent)
• Preference Cookies: Remember your settings and preferences

You can manage cookie preferences through your browser settings. Disabling essential cookies may affect platform functionality.

Your data may be processed in countries outside your jurisdiction. We ensure appropriate safeguards are in place, including:

• Standard contractual clauses approved by regulatory authorities
• Data protection agreements with all service providers
• Encryption of data in transit and at rest

Our Service is not intended for individuals under 18 years of age. We do not knowingly collect personal data from children. If we become aware that we have collected personal data from a child, we will take steps to delete that information.

We may update this Privacy Policy from time to time. We will notify you of significant changes by:

• Posting the updated policy on our website
• Sending an email notification for material changes
• Displaying an in-app notification

Your continued use of the Service after changes take effect constitutes your acceptance of the revised policy.

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us:

We aim to respond to all privacy-related inquiries within 30 days.