Privacy Policy

Summary

Trading Monkey is a hosted SaaS platform operated by Freemen Solutions Inc. (Québec, Canada), which is the data controller, unless and until a dedicated Trading Monkey entity is created. Data is stored on Freemen Solutions Inc.'s infrastructure and used only to deliver the Service.

What we collect

• Account: email, hashed password, name, optional avatar URL, optional phone, locale, timezone.
• Security: email verification token, password reset token, 2FA secret if enabled, session token version.
• Trading credentials: exchange API keys you supply, encrypted at rest.
• Trading activity: bot configurations, orders, deals, cycles, trades, intelligence snapshots.
• Operational telemetry: timestamps, errors, request IDs, audit events tied to your user ID.

What we do NOT collect

• Government IDs, KYC documents, biometrics.
• Payment cards (no billing in beta).
• Third-party analytics, ad-tech trackers, fingerprinting.

Why we collect it

• Operate the trading bots and surface accurate history.
• Authenticate you and protect your account.
• Send transactional email (verification, password reset, alerts).
• Debug failures and prevent abuse.

Third parties

• Exchanges you connect — receive your API calls and orders. Their terms apply.
• SMTP provider — sees your email and transactional content.
• LLM provider (DeepSeek via Resource Manager, if enabled) — receives anonymized market context. Your account identity is not transmitted.

Retention & security

Account and trading data are kept while your account exists. Logs and telemetry up to 90 days. Passwords are bcrypt-hashed; API keys and 2FA secrets are encrypted at rest with AES-256. Connections use HTTPS.

Your rights

Depending on where you live (EEA/UK GDPR, Quebec Law 25, California CCPA) you may have rights to access, correct, port, or delete your data. To exercise these rights, contact Freemen Solutions Inc.