Privacy Policy

Last updated: April 10, 2026

1. Introduction

This Privacy Policy describes how FreqBot Cloud ("we," "us," or "our") collects, uses, stores, and protects your personal information when you use our platform and services. We are committed to safeguarding your privacy and being transparent about our data practices.

2. Information We Collect

2.1 Information You Provide

  • Email address — collected when you join our waitlist or create an account
  • Exchange API keys — provided by you to connect your trading accounts (encrypted at rest with AES-256)
  • Strategy configurations — the trading strategies you build using our visual editor

2.2 Information Collected Automatically

  • Usage data — pages visited, features used, session duration
  • Device information — browser type, operating system, screen resolution
  • IP address — for security monitoring and abuse prevention
  • Cookies — essential cookies for authentication and session management

3. How We Use Your Information

We use the information we collect to:

  • Provide, operate, and maintain the FreqBot Cloud platform
  • Process waitlist registrations and communicate beta access invitations
  • Execute trading strategies on your behalf through connected exchange APIs
  • Send important service updates, security alerts, and product announcements
  • Monitor and improve the performance, security, and reliability of the Service
  • Respond to your support requests and inquiries
  • Comply with legal obligations

4. Data Storage & Security

4.1 Storage

Your data is stored securely using Supabase (built on PostgreSQL) with the following protections:

  • Database hosted on secured, managed cloud infrastructure
  • Row-Level Security (RLS) policies enforced at the database level
  • All connections encrypted in transit using TLS 1.3

4.2 API Key Security

  • Exchange API keys are encrypted using AES-256 encryption before storage
  • Decryption occurs only within isolated, sandboxed bot containers at runtime
  • We never store API keys with withdrawal permissions
  • You can revoke API key access at any time through your exchange settings

5. Data Sharing

We do not sell, rent, or trade your personal information. We may share your data only in the following limited circumstances:

  • Service providers — trusted third-party providers who help us operate the platform (e.g., Supabase for database, cloud providers for hosting), bound by data processing agreements
  • Legal requirements — when required by law, court order, or government regulation
  • Safety — to protect the rights, property, or safety of FreqBot Cloud, our users, or the public

6. Cookies

We use only essential cookies required for the Service to function:

  • Authentication cookies — to keep you logged in securely
  • Session cookies — to maintain your session state

We do not use advertising or tracking cookies. We do not share cookie data with third-party advertisers.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access — request a copy of the personal data we hold about you
  • Rectification — request correction of inaccurate personal data
  • Deletion — request deletion of your personal data ("right to be forgotten")
  • Portability — receive your data in a structured, machine-readable format
  • Objection — object to certain processing activities
  • Withdraw consent — withdraw consent for data processing at any time

To exercise any of these rights, contact us at privacy@freqbot.cloud.

8. GDPR Compliance

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR). Our legal basis for processing your data includes:

  • Consent — when you voluntarily submit your email to join the waitlist
  • Contract performance — when processing is necessary to provide the Service
  • Legitimate interests — for security monitoring, fraud prevention, and service improvement

9. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes described in this policy:

  • Waitlist data — retained until you request removal or the waitlist is closed
  • Account data — retained for the duration of your account plus 30 days after deletion
  • Trading data — retained for 90 days after account closure for dispute resolution

10. Children's Privacy

FreqBot Cloud is not intended for users under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal data from a child under 18, we will take steps to delete that information promptly.

11. Third-Party Links

The Service may contain links to third-party websites or services (e.g., cryptocurrency exchanges). We are not responsible for the privacy practices or content of these external sites. We encourage you to review their privacy policies independently.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Service. Your continued use of FreqBot Cloud after changes are posted constitutes your acceptance of the updated policy.

13. Contact Us

For questions, concerns, or requests regarding this Privacy Policy or your personal data, contact us at: