Privacy Policy

Last updated: July 3, 2025

1. Introduction

Welcome! This Privacy Policy (the “Policy”) explains how [Your Company Name] (“we,” “us,” or “our”) collects, uses, stores, and protects your information when you use our products: the Vanga platform (“Vanga”), our Analytics Platform, and our Algorithmic Trading Platform. Collectively, these products and related services and websites are referred to as the “Services.”

By using our Services, you agree to the collection and use of information in accordance with this Policy.

2. What data we collect

We collect several types of information for different purposes to provide and improve our Services.

2.1. Information you provide directly

• Registration data: When you create an account, we collect information such as your name, email address, and a hashed version of your password.
• Payment information: When subscribing, we may collect data necessary for payment processing. These payments are usually handled by third-party providers (e.g., Stripe), and we do not store your full card details.
• Exchange API keys: To use the Trading Platform and collect analytics data, you provide us with API keys (public and secret) from your crypto exchange accounts. You fully control the permissions granted to these keys (e.g., "read-only" or "trading allowed").

2.2. Information we collect automatically

• Usage data: We automatically collect information about how you interact with our Services. This includes IP address, browser type, device type, pages visited, date and time of visit, time spent on pages, and other diagnostic data.
• Cookies and tracking technologies: We use cookies and similar technologies to track activity on our Services and store certain information.

2.3. Information we receive via API

• Financial and trading data: When you connect API keys, we access data from your exchange accounts based on the granted permissions. This may include:
  • Current balances of your assets
  • Your trade history
  • List of open and filled orders
  • Data on deposits and withdrawals
• Strategy usage data: We collect data about the trading strategies you use on our platform, their parameters, and their performance (PnL, trade statistics).

3. How we use your data

We use collected data for the following purposes:

• To provide and support the Services: To create and manage your account, perform trading operations on your behalf (according to your settings), and display your trading history and analytics.
• To improve our products: We analyze usage data to understand which features are most used, identify issues, and enhance the user experience.
• For research and development: We use anonymized and aggregated trading data to improve Vanga’s forecasting models and develop new strategies. Your personal and financial data is not disclosed.
• To communicate with you: We may use your email to send important account notifications, updates about the Services, and marketing materials (you can opt out).
• To ensure security: To monitor and prevent fraudulent activity, unauthorized access, and other threats.
• To comply with legal obligations: To meet our legal and regulatory requirements.

4. Who we share your data with

We do not sell or share your personal and financial data with third parties for their marketing purposes. We may share your data only in the following cases:

• Service providers: We engage third-party companies and individuals to help us provide the Services (e.g., cloud hosting providers like AWS or Google Cloud, payment systems like Stripe, email services). These providers have access to your data only to perform these tasks on our behalf and are obligated not to disclose or use it for other purposes.
• Legal compliance: We may disclose your information if we believe in good faith that such action is necessary to comply with legal obligations, protect our rights or property, prevent misconduct, or ensure users' safety.
• Business transfer: In connection with a merger, acquisition, or asset sale, your information may be transferred to a new owner.

5. Data security

The security of your data is our top priority. We take all reasonable technical and organizational measures to protect it, including:

• Encryption: Using SSL/TLS for data in transit and encryption (e.g., AES-256) for sensitive data at rest.
• Secure API key storage: Your API keys are stored in encrypted form using best security practices.
• Password hashing: We store only cryptographic hashes of passwords, not the passwords themselves.
• Access control: Strict internal restrictions on data access, limited to authorized personnel only.

Despite our efforts, no method of transmission over the Internet or electronic storage is 100% secure.

6. Data retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Policy. Typically, this means we retain data while your account is active. After account deletion, we may retain some data for the period required by law (e.g., for accounting purposes).

7. Your privacy rights (under GDPR and other laws)

Depending on your jurisdiction, you may have the following rights:

• Right to access: Request a copy of your personal data.
• Right to rectification: Request correction of inaccurate or incomplete data.
• Right to erasure (“right to be forgotten”): Request deletion of your personal data.
• Right to restrict processing: Request restriction on how your data is processed.
• Right to data portability: Receive your data in a structured, machine-readable format.

To exercise these rights, please contact us at the address below.

8. Children’s privacy

Our Services are not intended for individuals under 18 years of age. We do not knowingly collect personal data from children.

9. Changes to this Privacy Policy

We may update this Policy from time to time. We will notify you of any changes by posting the new Policy on this page, and in the case of significant changes, by sending a notice to your email address.

10. Contact information

If you have any questions about this Privacy Policy, please contact us:

• By email: privacy@[your_company_name].com
• Via our website contact form: [your_website_link]