Legal
Privacy Policy
This Privacy Policy explains how EasyTradeWare ("ETW", "we", "us" or "our") collects, uses, shares and protects personal data when you visit easytradeware.com or use our Services (as defined in our Terms of Service). ETW is responsible for (the "controller" of) your personal data. You can contact us about privacy at any time at info@easytradeware.com.
1. Information we collect
Information you give us
- Account details: your email address, password (stored only as a salted hash, which means we cannot read it), account type (individual or institutional), country of residence, ZIP or postal code, and any display name you set.
- Referral details: the referral or administrator code you sign up with, which links your account to that Administrator (see Section 7 of our Terms of Service).
- Exchange connections: the API key and API secret you provide for each exchange account, the name you give the connection, and the strategy and risk settings you choose.
- Billing details: your plan, billing period, amounts paid and payment references. We do not store payment card details.
- Communications: messages you send us, and your email address if you ask to receive updates from us.
- AI-assisted features: if you use the AI Strategy Generator in our backtesting tools, the text you enter.
Information from your exchange accounts
Using the API keys you provide, we retrieve your balances, open positions, open and past orders, fills, realised profit and loss, fees and funding payments. We use this to run your strategies and to produce your reports.
Information collected automatically
- Log data: your IP address, browser type, operating system, the pages you request, referring URLs and the date and time of each request, recorded in our web-server logs.
- Country of access: we work out the country your IP address belongs to, to enforce our restricted-jurisdiction rules. The lookup runs on our own servers using IP geolocation data by DB-IP (licensed under CC BY 4.0); your IP address is not sent to DB-IP. We do not collect your precise location.
- Cookies: see Section 7.
- reCAPTCHA: our sign-in, registration and password-reset pages are protected by Google reCAPTCHA, which collects hardware and software information (such as device and browser data) and sends it to Google to tell humans from bots. Google's Privacy Policy and Terms of Service apply.
2. How we use your information
| Purpose | Information used | Legal basis |
|---|---|---|
| Create and run your account; sign you in; send activation, password-reset and service emails | Account details | Performance of our contract with you |
| Provide the Services: connect to your exchange, execute strategies, and show your positions, reports and analytics | Exchange connections; information from your exchange accounts | Performance of our contract with you |
| Give a linked Administrator access to your account | Account details; information from your exchange accounts | Performance of our contract with you, at your direction |
| Enforce restricted-jurisdiction and sanctions rules; prevent fraud and abuse; keep our systems secure | Country of access; log data; account details | Legal obligation; our legitimate interest in security and compliance |
| Billing, accounting and tax | Billing details; account details | Performance of our contract with you; legal obligation |
| Generate strategies with AI when you ask us to | The text you enter in AI-assisted features | Performance of our contract with you |
| Maintain and improve the Services, for example by fixing errors and studying aggregated strategy performance | Log data; information from your exchange accounts (in aggregate where possible) | Our legitimate interest in running and improving the Services |
| Send you news and updates (you can opt out at any time) | Email address | Consent, or our legitimate interest where the law allows |
| Comply with the law, respond to lawful requests, and establish or defend legal claims | Any relevant information | Legal obligation; our legitimate interests |
We do not sell your personal data, and we do not use it for third-party advertising.
3. How we share your information
- Exchanges: when we act on your API key, the exchange receives the requests and orders we send for your account. Each exchange handles your data under its own privacy policy.
- Your Administrator: if your account is linked to an Administrator, they can see your account details, connected exchange accounts, balances, positions and trade history.
- Service providers who process data for us under contract: Amazon Web Services (hosting and database), GoDaddy (email), Google (reCAPTCHA) and, only if you use AI-assisted features, our AI model provider Anthropic.
- Legal and safety: regulators, courts, law-enforcement and other authorities where the law requires it, or where needed to protect our rights, our users or others, to prevent fraud or to enforce our Terms.
- Business transfers: a buyer or successor as part of a merger, acquisition, financing or sale of assets, subject to this Privacy Policy.
- With your consent in any other case.
4. International transfers
Our servers and database are hosted by Amazon Web Services in Mumbai, India, and our service providers may process data in other countries. Where data protection law restricts transfers of your personal data (for example from the European Economic Area or the United Kingdom), we use appropriate safeguards such as standard contractual clauses.
5. How long we keep it
- Account and billing details are kept while your account is open and, after it closes, only as long as reasonably needed for legal, tax, accounting, anti-money-laundering or dispute-resolution purposes.
- API keys and secrets are deleted from our active systems when you disconnect the exchange account or close your ETW account. Copies may remain in backups for a limited period.
- Trade and report data is kept while your account is open so you can see your history, and then on the same basis as account details.
- Web-server logs are kept for about two weeks.
6. Security
All traffic to our website is encrypted with TLS (HTTPS), and connections to our database are encrypted. Passwords are stored only as salted hashes. Access to production systems and to API credentials is limited to authorised personnel. Because we never ask for withdrawal permissions, an API key used with ETW cannot be used to withdraw your funds, provided you have not enabled that permission. Where your exchange supports it, we recommend restricting your keys to the IP addresses we specify.
No system is completely secure, so we cannot guarantee absolute security. If you suspect unauthorised access to your account, tell us immediately. If a breach affects your personal data, we will notify you and the authorities where the law requires.
7. Cookies
We only use cookies that are strictly necessary for the website to work and to keep it secure:
| Cookie | Purpose | Duration |
|---|---|---|
sessionid | Keeps you signed in | 2 weeks |
csrftoken | Protects forms against cross-site request forgery | 1 year |
_GRECAPTCHA | Set by Google reCAPTCHA on the sign-in, registration and password-reset pages to tell humans from bots | 6 months |
We do not use analytics, advertising or tracking cookies. If that changes, we will update this policy and ask for your consent where the law requires.
8. Your rights
Depending on where you live (for example under the EU or UK GDPR, or India's Digital Personal Data Protection Act, 2023), you may have the right to access your personal data; correct it; have it deleted; restrict or object to how we use it; receive it in a portable format; withdraw consent you have given; and complain to a data protection authority. Some of these rights are limited, for example where we must keep data to meet a legal obligation.
To exercise your rights, email info@easytradeware.com from the address registered to your account. We may need to verify your identity, and we will respond within the time the law requires. You can disconnect your exchange accounts in your dashboard, or revoke your API keys at your exchange, at any time.
9. Children
The Services are not intended for anyone under 18, and we do not knowingly collect personal data from children. If we learn that we have, we will delete it.
10. Changes to this policy
We may update this Privacy Policy from time to time. We will post the updated version with a new "Last updated" date and, for material changes, notify you by email or through the Services.
11. Contact
Questions or requests about your personal data? Email info@easytradeware.com.