Privacy Policy

Last Updated: April 1, 2026 · Data Lab 214, LLC

1. Information We Collect

Account information: Email address and hashed password when you create an account.

API keys: Kraken exchange API keys, encrypted with AES-256 before storage. We never store these in plain text.

Trading data: Bot configuration, trade history, and performance metrics generated while using the Platform.

Usage data: IP addresses, browser type, pages visited, and timestamps for security and service improvement.

Billing data: Processed by Stripe. We do not store your credit card number.

2. How We Use Your Data

• Providing and operating the Platform
• Executing trades on your behalf via your exchange API keys
• Security monitoring and fraud prevention
• Improving Platform features and performance
• Sending transactional emails (password reset, billing)
• Customer support

3. API Key Handling

Your Kraken API keys are encrypted using AES-256 (Fernet) encryption before storage. They are never displayed back to you, never logged in plain text, and never shared with third parties. Keys are decrypted only at the moment of making an API call to Kraken, held in memory briefly, and never written to disk unencrypted.

4. Data Retention

We retain your data while your account is active. Upon account deletion, we will delete your personal data within 30 days. Anonymized, aggregated data may be retained for analytical purposes.

5. Third-Party Services

• Stripe: Payment processing. Subject to Stripe's Privacy Policy.
• Anthropic: Powers the IQ Assistant chat feature. Your questions are sent to Anthropic's API for processing. No personal financial data is included in assistant queries beyond aggregate bot performance metrics.
• Kraken: Your exchange. We interact via API keys you provide.

6. Cookies

We use essential session cookies to maintain your login state. We do not use tracking cookies, advertising cookies, or third-party analytics cookies. Session cookies are HttpOnly, SameSite=Strict, and Secure in production.

7. Your Rights

You have the right to:

• Access: Request a copy of the data we hold about you
• Delete: Request deletion of your account and personal data
• Export: Request your trade history in CSV format
• Correct: Update your email address or other account information

To exercise these rights, contact us at [email protected].

8. Security

We implement industry-standard security measures including AES-256 encryption, bcrypt password hashing, CSRF protection, rate limiting, security headers, and account lockout after failed login attempts. See our Terms of Service for full security details.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes by email.

10. Contact

For privacy questions or data requests:

Data Lab 214, LLC
Email: [email protected]