Security

Your exchange keys can only trade, never withdraw, and they are stored encrypted. Sensitive actions need a fresh two-factor code, and every bot runs under safety rules that no one can switch off.

Exchange keys

• A key with any withdrawal, transfer or wallet permission is rejected.
• Keys must be bound to the server IP address shown in Settings.
• We recommend a dedicated sub-account or key for the platform.
• Keys are encrypted at rest, always shown masked, and decrypted only by the process that trades.

Your account

• Two-factor authentication for sign-in and for sensitive actions such as going live.
• A list of your sessions, with log out everywhere.
• Passwords are stored only as strong one-way hashes.
• Sign-in is protected by a captcha and rate limits.

Trading safety

• Every position has a stop loss on the exchange. No valid stop loss means no trade.
• The guard is always on.
• Every order carries a unique client id and is never sent twice after a lost answer.
• After a restart, open orders and positions are checked with the exchange before anything else.

What you type

Secrets such as API keys, seed phrases, passwords and card numbers are removed from chat and support text before it reaches the AI and before it is stored.