Privacy Policy

Coin2Cloud (“we,” “us,” or “our”) operates the coin2cloud.com website and automated trading services. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.

By accessing or using our services, you consent to the data practices described in this policy. If you do not agree, please discontinue use of the platform immediately.

We collect the following categories of information:

2.1 Information Provided via OAuth

• Deriv account identifier (account ID)
• Account type (demo or real)
• Display name (if provided by Deriv)
• Scoped trading token (API token with trade-only permissions)

2.2 Trading Data

• Bot configuration settings (stake, symbol, risk parameters)
• Trade execution history (entry/exit prices, profit/loss, timestamps)
• Session performance metrics

2.3 Technical Data

• IP address and approximate geolocation
• Browser type, device information, and operating system
• Pages visited, features used, and session duration
• Cookies and similar tracking technologies

2.4 Information We Do NOT Collect

• Your Deriv password (never transmitted to us)
• Government-issued identification documents
• Full payment card details (handled by third-party processors)

We use collected information for the following purposes:

• Execute trades on your Deriv account as configured by you
• Display your trading history, performance metrics, and account status
• Improve and optimize our trading strategies and platform features
• Provide customer support and respond to inquiries
• Send trade notifications and alerts (when enabled by you)
• Detect, prevent, and address fraud, abuse, or security incidents
• Comply with applicable legal obligations
• Conduct anonymized, aggregated analytics to improve service quality

We take the security of your data seriously and implement industry-standard measures to protect it:

• Encryption at rest: Trading tokens are encrypted using AES-256-GCM before storage. Encryption keys are stored separately in environment variables, never in source code or databases.
• Encryption in transit: All communication between your browser and our servers uses TLS 1.3 (HTTPS).
• Access control: Strict role-based access. No employee can view your raw token.
• Infrastructure: Hosted on SOC 2 compliant cloud infrastructure with automatic backups and monitoring.

No method of electronic storage or transmission is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

We share data only with the following categories of third parties:

• Deriv (Binary.com): To execute trades on your behalf via their API. Subject to Deriv's privacy policy.
• Hosting provider: Cloud infrastructure for running our servers. Data processed in accordance with their DPA.
• Payment processor: For Pro plan purchases only. We never receive or store full card numbers.
• Analytics: Anonymized, aggregated usage data to understand platform usage patterns.

We do not sell, rent, or trade your personal information to any third party for marketing or advertising purposes.

We use the following types of cookies:

• Essential cookies: Required for authentication, session management, and core functionality. Cannot be disabled.
• Analytics cookies: Help us understand usage patterns and improve the platform. Can be disabled in your browser settings.

We do not use advertising cookies or participate in third-party ad networks.

• Active accounts: Data is retained for as long as your account is active and for 30 days after deletion request.
• Trade history: Retained for the duration of your account to provide performance analytics.
• After deletion: All personal data and trading tokens are permanently deleted within 30 days of account deletion. Anonymized, aggregated statistics may be retained indefinitely.

You have the right to:

• Access: Request a copy of all personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your account and all associated data.
• Portability: Receive your trade history in a machine-readable format (JSON).
• Revocation: Revoke your Deriv API token at any time from your Deriv account settings, immediately stopping all bot activity.
• Objection: Object to processing of your data for specific purposes.

To exercise any of these rights, contact us at privacy@coin2cloud.com.

Our services are not directed at individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal data, please contact us immediately.

Your data may be processed on servers located outside your country of residence. By using our platform, you consent to the transfer of your information to countries that may have different data protection laws than your jurisdiction.

We may update this Privacy Policy from time to time. Material changes will be communicated via the platform dashboard or email notification at least 14 days before taking effect. Continued use of the platform after changes constitutes acceptance of the updated policy.

For questions, concerns, or requests related to this Privacy Policy:

• Email: privacy@coin2cloud.com
• Response time: Within 72 hours for general inquiries, within 30 days for data access requests