Introduction
MagicTradeBot ("we," "us," or "our") operates the MagicTradeBot website and provides a Rust-powered crypto trading automation platform for self-hosted deployments. This Privacy Policy explains how we collect, use, protect, and disclose your personal information when you use our services.
By using MagicTradeBot, you agree to the data practices described in this policy. If you do not agree, please discontinue use of the platform.
Information we collect
We collect the minimum data necessary to provide and improve the service:
| Category | Examples | Purpose |
|---|---|---|
| Account data | Name, email address, password hash | Account creation, authentication, support |
| Billing data | Transaction reference, crypto wallet address | License verification, payment processing |
| Technical data | IP address, browser type, OS, session logs | Security monitoring, abuse prevention |
| Usage data | Pages visited, features accessed, error reports | Platform improvement, crash diagnosis |
| Support data | Messages sent to support, ticket history | Customer service and issue resolution |
How we use your information
- To deliver, personalise, and improve MagicTradeBot platform functionality
- To process license purchases and verify active subscriptions
- To provide customer and technical support
- To send service alerts, security notices, and product updates (opt-out available)
- To train and refine internal analytics using only anonymised, aggregated data
- To comply with applicable laws and protect platform integrity
Promotional emails include an unsubscribe link in every message. Service and security notices cannot be opted out of while your account is active, as they are essential to platform operation.
Data sharing & third parties
We share data only in the following limited circumstances:
- Payment processing. NowPayments (crypto gateway) handles transaction processing. Billing data is subject to their privacy policy. We do not receive or store full payment credentials.
- Analytics & monitoring. Google Analytics (anonymised) and Sentry (error tracking) help us understand platform performance and diagnose crashes.
- Legal obligations. We may disclose data when required by applicable law, court order, or to protect our legal rights.
- Business transfers. In the event of a merger or acquisition, user data may transfer to the new entity under equivalent privacy protections.
Data security
- All data transmitted to our servers is encrypted using SSL/TLS
- Stored data is encrypted at rest using AES-256
- Access to sensitive systems is restricted via role-based permissions and two-factor authentication
- Regular security audits and vulnerability scans are conducted against production infrastructure
Your rights
Depending on your jurisdiction, you may have the following rights regarding your personal data:
- Access. Request a copy of the personal data we hold about you
- Correction. Update inaccurate or incomplete information via your account dashboard
- Deletion. Request that your account and associated personal data be permanently deleted
- Portability. Request an export of your data in a machine-readable format
- Opt-out. Withdraw consent for marketing emails or non-essential data processing
- Restriction. Request that we limit processing of your data in specific circumstances
To exercise any of these rights, contact us at sales@magictradebot.com. We will respond within 30 days.
Google API services (Limited Use)
MagicTradeBot integrates select Google APIs. We comply fully with the Google API Services User Data Policy, including Limited Use requirements:
- Google user data is accessed and used strictly for the functionality you explicitly request
- We do not use Google user data for advertising, profiling, or unauthorised analytics purposes
- We do not share Google user data with third parties except as required for core service delivery or legal compliance
Data retention
We retain personal data for as long as your account remains active or as required to provide the service. Upon account deletion:
- Account and profile data is deleted within 30 days
- Billing records are retained for 7 years as required by tax and financial regulations
- Anonymised, aggregated analytics data may be retained indefinitely as it cannot be linked to individuals
- Support ticket data is retained for 2 years after ticket closure
Policy updates
We may update this Privacy Policy periodically to reflect changes in our data practices or legal requirements. When we make material changes, we will:
- Update the "Last Updated" date at the top of this page
- Send an email notification to registered users for significant changes
- Display a notice on the platform dashboard for 30 days
Continued use of MagicTradeBot after changes are published constitutes acceptance of the revised policy.
Contact & data requests
For any privacy-related questions, concerns, or data access / deletion requests, contact our privacy team directly: