PRIVACY POLICY

capitalgainstradebot (“we”, “us”, “our”) respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect personal information when you use capitalgainstradebot.com.

By using the Platform, you consent to the practices described in this Policy.

Account data: name, email, phone number, country, password (hashed), and date of registration.

KYC / Identity data: government-issued ID documents, selfies, proof of address, and any information required to comply with anti-money-laundering regulations.

Financial data: deposit and withdrawal history, wallet addresses, transaction hashes, balances, trading history, and bot activity logs.

Technical data: IP address, browser type, device identifiers, session timestamps, OTP delivery logs, and pages visited.

Communications: support tickets, chat messages, and emails you send to us.

To create and operate your account, process deposits and withdrawals, and execute trades.

To verify your identity and comply with KYC, AML, sanctions, and counter-terrorism-financing laws.

To detect fraud, abuse, multi-accounting, and to investigate suspicious activity.

To send transactional notifications, OTP codes, security alerts, and (where permitted) marketing communications.

To improve the Platform, fix bugs, and develop new features.

We process personal data on the basis of: your consent (where required), performance of our contract with you (the Terms of Service), compliance with legal obligations (AML/KYC), and our legitimate interests in operating a secure trading platform.

Payment gateways (e.g. NOWPayments, CoinPayments, Coinbase Commerce) to process crypto deposits and withdrawals.

KYC providers and identity-verification partners.

Email/SMS providers (e.g. Brevo) to deliver OTP codes and notifications.

Cloud hosting and infrastructure providers (Replit and its sub-processors) used to run the Platform.

Law enforcement, regulators, or courts when legally required, or to protect our rights and the safety of our users.

We do NOT sell your personal information to advertisers or data brokers.

We use cookies and local storage to keep you signed in, remember preferences, and measure usage. You may disable cookies in your browser, but parts of the Platform may not function correctly.

We retain personal data for as long as your account is active and for at least five (5) years after closure to comply with AML record-keeping laws. KYC documents and transaction records may be kept longer where required by law.

Passwords are hashed with bcrypt; sessions use signed JWT tokens; communication is encrypted in transit with TLS. KYC documents are stored in private object storage and accessible only with authenticated, signed URLs. We use idle auto-logout, two-factor email verification on login, and atomic database transactions for financial operations.

No system is 100% secure. You are responsible for keeping your password and devices safe.

Subject to applicable law (including GDPR for EU residents), you have the right to: access your data, correct inaccurate data, request deletion (subject to legal retention), object to or restrict processing, and request a portable copy of your data. To exercise these rights, contact support@capitalgainstradebot.com.

The Platform operates globally and your information may be processed in countries other than your own. We use appropriate safeguards (such as standard contractual clauses) when required.

The Platform is not intended for anyone under 18. We do not knowingly collect data from minors. If we learn we have, we will delete it.

We may update this Policy from time to time. Material changes will be announced on the Platform. Your continued use after the effective date constitutes acceptance.

For privacy questions or to exercise your rights: support@capitalgainstradebot.com.