Privacy Policy

The data controller responsible for your personal information is:

If you are in the European Economic Area or the United Kingdom and have questions about your rights under GDPR or UK GDPR, you may contact us at privacy@algonney.com.

This Policy covers all personal information processed by Algonney in connection with the Platform, including account data, trading data, wallet and payment data, exchange data, support communications, device and session data, cookies, and analytics.

The Platform may contain links to third-party services (such as exchanges, payment providers, or analytics tools). This Policy does not apply to those third parties. We encourage you to review their privacy policies.

We collect information that you provide directly, information generated when you use the Platform, and information from third-party services you connect to your account.

We may receive information from:

• Connected exchanges (Binance, Bybit, OKX)
• Payment providers and Algonney Pay
• Blockchain networks and blockchain analytics providers
• OAuth/login providers such as Google
• CAPTCHA and fraud-prevention providers
• Analytics and infrastructure providers
• Referral/affiliate partners
• Support, email, webhook, and notification providers
• Public sources where needed for compliance, sanctions, fraud, or abuse review

We use information to:

• Provide, operate, and maintain the Platform
• Execute trading strategies, manage automated bots, and process orders
• Operate wallet, deposit, withdrawal, and payment features
• Process payments, manage subscriptions, tokens, billing, and invoices
• Provide backtesting, strategy creation, and custom code execution
• Operate tournaments, leaderboards, and competitions
• Manage referrals, affiliates, missions, campaigns, and rewards
• Send account, trading, wallet, security, billing, tournament, referral, and system notifications
• Detect and prevent fraud, abuse, unauthorized access, and security incidents
• Screen for sanctions, AML, and compliance obligations
• Provide customer support and investigate issues
• Improve Platform performance, user experience, and features
• Conduct analytics and research
• Comply with legal obligations and legal process

Where required by applicable law (such as GDPR), we rely on the following legal bases to process your personal information:

We do not sell personal information for money.

We do not use personal information for cross-context behavioral advertising.

We may share information with:

• Connected exchanges to operate trading features
• Payment providers to process payments, deposits, and withdrawals
• Service providers who assist with hosting, email delivery, analytics, fraud prevention, CAPTCHA, notifications, and AI features
• Blockchain networks when you make deposits or withdrawals
• Law enforcement, regulators, or other parties when required by law, legal process, or to protect rights, safety, or property
• Other users in limited contexts, such as tournament leaderboards, public bot/template listings, referral pages, or marketplace content

We use the following third-party service providers ("subprocessors") to help operate the Platform. This list may change as our providers change; the current list is maintained here, and you may request the latest version at privacy@algonney.com.

Where personal data is transferred internationally, we use appropriate safeguards such as contractual protections, standard contractual clauses, or other lawful transfer mechanisms.

We use essential cookies required for the Platform to function, as well as functional and analytics cookies that help us improve your experience. Where required by law, we will request consent before using non-essential cookies or similar technologies. You may change your cookie preferences through our cookie settings interface and should not rely only on browser settings.

For a detailed cookie table (cookie name, provider, purpose, category, duration, and consent mechanism), see our Cookie Policy.

Algonney is based in Lebanon and uses service providers, infrastructure, exchanges, payment providers, analytics providers, communication providers, and AI providers that may process data in Lebanon, the United States, the European Economic Area, the United Kingdom, and other countries.

Where required, we use appropriate safeguards such as contractual protections, standard contractual clauses, transfer risk assessments, or other lawful transfer mechanisms.

We retain personal information according to the following general guidelines:

Data may remain in backups, immutable logs, disaster recovery systems, and audit records until those systems expire or are overwritten according to our retention schedules.

We use encryption in transit (HTTPS/TLS) and at rest where appropriate, credential encryption for exchange API keys, password hashing, two-factor authentication, access controls, logging, monitoring, and other technical and organizational measures designed to protect personal information.

Trading, wallet, payment, API credential, and security data are treated as sensitive operational data. Access is restricted to authorized systems and personnel with a business, security, support, compliance, or legal need.

Internal access may be controlled through role-based access controls, multi-factor authentication, audit logs, approval workflows, breakglass controls, and least-privilege permissions. Administrative actions, including impersonation, breakglass access, approvals, rejections, edits, exports, and reviews, may be logged in audit records.

No system is completely secure. We regularly review and improve our security practices.

We may use automated systems to detect fraud, abuse, suspicious login activity, rate-limit violations, prohibited activity, payment risk, withdrawal risk, reward abuse, bot behavior, or security threats. These systems may result in additional verification, CAPTCHA challenges, delays, warnings, feature limits, blocked actions, manual review, suspension, or termination.

We may compare, reconcile, correct, restate, or update trading, wallet, payment, balance, order, position, reward, and analytics records based on exchange data, blockchain data, payment provider data, internal ledgers, support requests, or administrative review.

Where required by law, you may request human review or appeal certain decisions. If your account, withdrawal, reward, payment, or feature access is restricted because of automated or manual risk review, you may contact support to request review, unless prohibited by law or security requirements.

Depending on your location, you may have rights to:

• Access your personal information
• Correct inaccurate information
• Delete your information
• Object to or restrict processing
• Withdraw consent where applicable
• Data portability
• Opt out of marketing communications
• Opt out of sale/share or targeted advertising where applicable
• Limit use/disclosure of sensitive personal information where applicable
• Appeal certain decisions where applicable
• Lodge a complaint with a supervisory authority

Some features may display information to other users or the public, such as display name, username, avatar, tournament ranking, leaderboard results, public bot or template listings, referral campaign pages, or strategy marketplace content.

If you create, publish, sell, share, review, or use templates, bots, indicators, or strategies in the marketplace, we may process creator identity, listing data, usage metrics, purchases, reviews, moderation status, takedown records, version history, and related analytics.

Do not submit information you do not want shared through those features.

Depending on the feature and jurisdiction, some information we process may be considered sensitive, such as identity verification data, financial account information, precise location (if collected), security credentials, biometric/liveness verification data, or fraud/risk signals. We use sensitive data only for permitted purposes such as security, compliance, identity verification, fraud prevention, payment processing, and providing requested services.

The Platform is not intended for individuals under 18. We do not knowingly collect personal information from minors. If we learn that a minor has provided personal information, we may delete it and close the account.

We may update this policy periodically. If we make material changes, we will provide notice through the Platform, email, or another appropriate method. Where required by law, we will request consent before applying changes to processing that require consent.

The “Last Updated” date at the top of this page indicates when this Policy was last revised.