Privacy Policy

This is the full, binding text. A plain-English summary is also available; where the two differ, this page governs.

1. Introduction

TradeFloor ("we", "our", "us") operates the tradefloor.co platform, providing algorithmic cryptocurrency trading tools, market signals, and analytics. This Privacy Policy explains how we collect, use, and protect your information.

2. Information We Collect

We collect the following types of information:

• Account information: email address, name (when signing in with Google)
• Exchange API keys: encrypted at rest with Fernet (AES + HMAC); used solely for trade execution on your behalf
• Trading data: trade history, positions, and performance metrics generated through the platform
• Usage data: pages visited, features used, timestamps, device and browser type
• Network address: your IP address. Sign-in history keeps it in a coarse form (the last two octets masked) alongside a keyed hash, so repeat visits can be recognised without storing the address itself; the immutable trade audit log records it for forensic integrity

3. How We Use Your Information

• Authenticate your account and maintain your session
• Execute trades on supported exchanges using your API keys
• Display analytics, performance metrics, and trading signals
• Send notifications about trade activity (via Telegram, if configured)
• Improve the platform and troubleshoot issues

4. API Key Security

Your exchange API keys are encrypted using Fernet (AES + HMAC) encryption before being stored in our database. Keys are decrypted only at the moment of trade execution and are never logged, displayed in full, or transmitted to third parties. We strongly recommend configuring your API keys with trade-only permissions and no withdrawal access.

5. Data Sharing

We do not sell, rent, or share your personal data with third parties for marketing purposes. Your data may be shared only in the following circumstances:

• With cryptocurrency exchanges: only your API keys, for trade execution
• With infrastructure providers: hosting, database services (data encrypted in transit)
• With Google Analytics: page-level usage measurement, only after you accept the cookie banner
• With a geolocation provider (ipapi.co): the NETWORK your address belongs to, truncated to a /24 (IPv4) or /48 (IPv6) block and never the full address, used to name the country in security notices and to apply access restrictions where we are required to
• When required by law: in response to lawful requests by public authorities

6. Cookies & Local Storage

We use browser local storage to maintain your authentication session (access and refresh tokens) and user preferences (language, theme). We do not use advertising, retargeting or cross-site tracking cookies. We do use Google Analytics 4 for page-level measurement; it runs under Consent Mode with analytics storage DENIED by default, so no analytics cookie is written until you accept the banner, and declining leaves the site fully usable. Google Sign-In may set its own cookies as part of the authentication flow.

7. Data Retention & Deletion

Your data is retained as long as your account is active. You may request deletion of your account and all associated data at any time by contacting us. Upon deletion, all personal information, API keys, and trading history are permanently removed from our systems.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via the platform or email. Continued use of the service after changes constitutes acceptance of the updated policy.

9. Legal Entity

TradeFloor is operated by TradeFloor Technologies.
Contact: [email protected]
Data Protection inquiries: [email protected]

10. Contact

For questions about this Privacy Policy or your data, contact us at [email protected].

// questions · [email protected]