Privacy Policy

Effective date: June 25, 2026 · Last updated: June 25, 2026

This Privacy Policy explains how TradeScenario (“we”, “us”) collects, uses, stores, and shares personal data when you use tradescenario.online and the Telegram bot @AiTradeConsultant_bot (the “Service”).

Data controller / contact:
TradeScenario · tradescenario.online
Email: support@tradescenario.online
Privacy requests: support@tradescenario.online (subject: “Privacy request”)

1. Scope

This Policy applies to visitors of tradescenario.online, subscribers, and Telegram bot users. It does not apply to third-party websites, exchanges, or payment processors, which have their own policies.

2. Data we collect

2.1 Data you provide

• Telegram User ID, username (if visible), first name, and chat ID.
• Email address if you provide it for support or at checkout (via payment provider).
• Telegram User ID entered at checkout for subscription activation.
• Support messages you send to us.
• Exchange API key and secret if you voluntarily submit them via /key in the bot.
• License activation keys you enter.

2.2 Data collected automatically

• Bot command history and interaction timestamps (e.g. Scan, Scenario, /activate).
• Server logs: IP address, user agent, request time (for website and webhook endpoints).
• Subscription status: activation date, expiry date, license key hash (not plain key).
• Payment event identifiers from payment providers (we do not receive or store full card numbers).

2.3 Data we do not intentionally collect

• Government ID, passport, or KYC documents (unless you voluntarily send them in support — not required).
• Private keys, seed phrases, or exchange passwords.
• Full payment card numbers (processed by Stripe / Lemon Squeezy / other providers).

3. How we use data

We process personal data for the following purposes and legal bases (where GDPR applies):

• Provide the Service (contract): activate subscription, deliver bot features, optional API sync.
• Payments and billing (contract / legal obligation): process subscriptions, prevent fraud, handle disputes.
• Support (contract / legitimate interest): respond to inquiries and troubleshoot access.
• Security (legitimate interest): detect abuse, protect infrastructure, rate-limit webhooks.
• Compliance (legal obligation): tax, accounting, and lawful requests where required.
• Improvements (legitimate interest): aggregated usage analysis without profiling for automated trading decisions.

We do not sell your personal data. We do not use your data to trade on your behalf.

4. Exchange API credentials

Providing API keys is optional. If provided:

• Keys are stored on our server to read account-related data (e.g. balance, positions, closed PnL) as configured in the bot.
• We recommend read-only API permissions. Do not grant withdrawal permissions.
• You can delete keys on the exchange side at any time; contact us to remove stored credentials from our systems.
• You acknowledge that storing API credentials involves inherent risk, and you provide them voluntarily at your own responsibility.

5. Sharing with third parties

We share data only as necessary to operate the Service:

• Telegram — message delivery and bot API (Telegram Privacy Policy applies).
• Payment processors (e.g. Stripe, Lemon Squeezy) — payment processing and fraud prevention.
• Hosting provider — server infrastructure where the bot and website are hosted.
• Market data / news providers — we send API requests; they do not receive your Telegram ID unless configured otherwise.
• Law enforcement — only when required by valid legal process.

We require processors to handle data only for specified purposes and apply appropriate security measures.

6. International transfers

Your data may be processed in countries other than your own (e.g. where our servers or providers operate). Where required, we rely on appropriate safeguards such as standard contractual clauses or equivalent mechanisms.

7. Retention

• Subscription records: for the life of the account plus up to 3 years for support, tax, and dispute purposes.
• Payment references: as required by accounting and tax law (typically up to 7 years where applicable).
• Server logs: typically up to 90 days, unless needed for security investigations.
• API keys: until you request deletion or revoke on the exchange; deleted on account termination where feasible.
• License key hashes: retained to prevent reuse and fraud.

We may retain anonymized or aggregated data longer for statistics.

8. Security

We implement reasonable technical and organizational measures, including access restrictions, encrypted connections (HTTPS), and separation of production secrets. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

You are responsible for securing your Telegram account and exchange credentials.

9. Your rights

Depending on your location (including EEA/UK under GDPR), you may have the right to:

• access your personal data;
• rectify inaccurate data;
• erase data (“right to be forgotten”) where applicable;
• restrict or object to certain processing;
• data portability where applicable;
• withdraw consent where processing is consent-based;
• lodge a complaint with a supervisory authority.

To exercise rights, email support@tradescenario.online with your Telegram User ID. We may need to verify your identity. We respond within 30 days where required by law.

10. Cookies and website analytics

tradescenario.online is primarily a static informational site. We do not use invasive advertising trackers. Basic server logs may record technical data. If we add analytics cookies in the future, this Policy will be updated and consent obtained where required.

11. Children

The Service is not directed to anyone under 18. We do not knowingly collect data from minors. Contact us if you believe a minor has provided data; we will delete it.

12. Changes

We may update this Policy. The “Last updated” date will change. Material changes will be posted on tradescenario.online. Continued use after changes constitutes acceptance where permitted by law.