Privacy Policy — ByteBoom

1. Overview

ByteBoom provides AI-assisted automated trading tools that connect to your cryptocurrency exchange account through restricted API credentials. We are a non-custodial service — we do not hold, custody, or control your digital assets. Your funds remain on your exchange at all times.

Because our product executes trades on your behalf using exchange API keys, protecting your credentials and account data is central to how we operate. This policy describes what we collect, why we collect it, and the safeguards we apply.

2. Definitions

“Account” means a registered user account with ByteBoom, created via our website or mobile application.

“Personal Information” means information that can be associated with an identified or identifiable person, such as name, email address, telephone number, date of birth, device identifiers, IP address, and exchange API credentials linked to your identity. It does not include anonymized or aggregated data that cannot reasonably identify you.

“Services” means the ByteBoom website, mobile application, dashboard, APIs, trading engine, notifications, subscription and billing features, customer support, and all related functionality we provide.

“Site” means our website and any official online properties through which we offer the Services.

“Exchange API Credentials” means the API key, secret key, and optional passphrase you provide to connect your exchange account (e.g., Binance) to ByteBoom for authorized trading operations only.

“User” means any person who registers for or uses the Services.

3. What Personal Information Do We Collect?

We may collect information about you when you visit our Site or use the Services, including the following:

Registration and account information

When you create an Account or use the Services, we may collect:

Email address — for account creation, login verification (OTP), and service communications
Full name — for account identification and personalization
Date of birth — for age verification and regulatory compliance (you must be 18 or older)
Password or authentication tokens — stored using industry-standard hashing; we never store plain-text passwords

Exchange API credentials

To enable automated trading on your exchange account, we collect credentials you voluntarily provide:

API Key — public identifier allowing our systems to connect to your exchange
Secret Key — private key used to authenticate and authorize trade execution
Passphrase — required by certain exchanges as an additional security layer
Account label — a user-defined name for your exchange connection
Exchange name and supported trading permissions associated with the key

We require trade-only API keys with withdrawal permissions disabled. Keys that include withdrawal access are rejected.

Transaction, trading, and experience information

When you use the Services, we may collect:

Trade execution data — orders placed, symbols traded, amounts, timestamps, and trading engine activity logs
Subscription and billing records — plan selected, payment status, wallet transaction references where applicable
IP address, cookie identifiers, browser type, device type, operating system, and mobile advertising identifiers
Pages visited before and after using the Services, referral sources, and interaction data within the app or dashboard
Push notification tokens — to deliver trade alerts, trading engine signals, and account status updates
Theme, language, and display preferences — some stored locally on your device only

Information from third-party sources

Where permitted by law, we may receive information from third parties such as identity verification partners, payment processors, analytics providers, and public databases — including name, address, sanctions list status, and fraud-prevention signals.

Communications and support

When you contact customer support, respond to surveys, or communicate with us, we may collect your email, message content, attachments, and any other information you choose to provide.

4. How Do We Process Personal Information?

We process your information for the following purposes:

Operate the Site and provide the Services — manage accounts, authenticate access, connect to your exchange, execute trades per your selected trading engine configuration, and process subscriptions
Communicate with you — send account notifications, trade alerts, security notices, and service updates
Personalize your experience — implement preferences, dashboard settings, and relevant product features
Manage our business — monitor, analyze, and improve performance, quality, and reliability; develop new products; train staff; and enforce agreements
Manage risk and verify identity — enhance security, detect fraud, spam, malware, or unauthorized access; prevent prohibited activities; and enforce our Terms of Service
Facilitate third-party services — when you choose features that require exchange connectivity, payment processing, or infrastructure partners, we share only what is necessary to deliver those features
Marketing — with your consent where required, we may send product updates or promotional communications. You may opt out at any time
Legal compliance — meet obligations under applicable laws, regulations, and lawful requests from authorities
Customer support — respond to requests, resolve disputes, and troubleshoot problems
Other disclosed purposes — any additional purpose disclosed when you provide information, or with your consent

5. How We Protect Your Exchange API Credentials

Your exchange API credentials are among the most sensitive data we handle. We apply the following measures:

Encrypted storage — API keys are encrypted using AES-256 before being stored on our servers
Secure transmission — all credentials and API traffic are transmitted over TLS 1.2+ encrypted connections
On-device security — locally cached credentials on mobile devices use hardware-backed secure storage (iOS Keychain / Android Keystore)
No withdrawals — credentials are used only for authorized trading. We never use your API keys to withdraw funds from your exchange
Instant revocation — revoke ByteBoom's access anytime from your dashboard or directly on your exchange
Scope validation — we verify API key permissions before activation and reject keys with excessive scopes

Non-custodial by design: Your digital assets remain on the exchange. We cannot move your balance unless your API key grants withdrawal permission — which we do not accept.

6. Cookies and Tracking Technologies

When you visit the Site or use the Services, we may use cookies, pixel tags, local storage, session storage, and similar technologies (collectively, “Cookies”) to:

Recognize you as a User and customize your experience
Measure the effectiveness of promotions and perform analytics
Understand how Users interact with the Services so we can improve functionality
Mitigate risk, prevent fraudulent activity, and improve security

You may block, disable, or delete Cookies through your browser or device settings. However, certain features of the Services may not function properly without Cookies.

Do Not Track: Some browsers offer a “Do Not Track” (DNT) preference. No formal DNT standard has been widely adopted, and we do not currently respond to or honor DNT signals.

7. Do We Share Personal Information?

We may share your Personal Information in the following circumstances:

Within our corporate group — to provide Services, manage risk, detect fraud, and maintain infrastructure
Service providers — third parties that perform functions on our behalf, such as cloud hosting, analytics, crash reporting, email delivery, and customer support. These providers process data under contractual obligations to protect it
Cryptocurrency exchanges — we transmit your API credentials to supported exchanges (e.g., Binance) solely to execute trades you authorize through our trading engines
Protection and legal compliance — to protect vital interests, our property, legal rights, and the safety of Users; assess and prevent fraud; respond to subpoenas, court orders, or regulatory requirements; or report suspected illegal activity
Business transfers — in connection with a merger, acquisition, reorganization, or sale of assets, subject to this Privacy Policy or equivalent protections
With your consent — when you authorize a connection with a third-party account, platform, or feature

We do not sell your Personal Information.

8. Why Do We Retain Personal Information?

We retain Personal Information to fulfill legal and regulatory obligations and for legitimate business purposes, including:

Maintaining your Account and providing ongoing Services
Resolving disputes and enforcing our agreements
Meeting tax, accounting, and compliance requirements
Improving and securing our systems

We may retain data longer than minimum legal requirements when permitted and in our legitimate business interests. If your Account is closed, we may mask or anonymize Personal Information but reserve the ability to retain and access data as required by law. Deleted accounts may leave anonymized, aggregated analytics data that cannot identify you.

You may remove exchange API keys at any time through your dashboard. To request full account deletion, contact support@byteboom.ai.

9. How Do We Protect Your Personal Information?

We maintain appropriate technical, physical, and administrative security measures designed to provide reasonable protection against loss, misuse, unauthorized access, disclosure, and alteration. These include firewalls, encryption, access authorization controls, and secure development practices.

However, no method of transmission or storage is completely secure. We cannot guarantee that loss, misuse, unauthorized acquisition, or alteration of your data will never occur. You are responsible for maintaining the confidentiality of your Account credentials, choosing strong passwords, enabling two-factor authentication on your exchange where available, and verifying that Personal Information we maintain about you is accurate and current.

We are not responsible for protecting Personal Information you transmit to us over channels we do not control (e.g., unencrypted email or SMS) once it leaves your device until it reaches our secured systems.

10. Can Children Use the Services?

The Site and Services are not directed to individuals under the age of 18 (“Minors”). We do not knowingly collect Personal Information from Minors. Cryptocurrency trading involves significant financial risk and is restricted to adults in most jurisdictions.

If we obtain actual knowledge that we have collected Personal Information from a Minor, we will promptly delete it (unless legally obligated to retain it) and take steps to disable the associated Account.

11. Third-Party Websites and Services

The Services may contain links to third-party websites, exchanges, wallets, or social media platforms. Any information you provide to a third party is governed by that party's privacy policy, not ours. We are not responsible for the content, privacy, or security practices of third-party services.

Information you voluntarily publish in public forums, communities, or social media may be viewed and used by others without restriction. Use such services at your own risk.

12. Your Rights

Depending on your location, you may have certain rights regarding your Personal Information:

For EU/EEA Users (GDPR)

Access your personal data
Rectify inaccurate data
Erase your data (“right to be forgotten”)
Restrict processing of your data
Data portability
Object to processing
Withdraw consent at any time

For California Users (CCPA/CPRA)

Know what personal information we collect, use, and disclose
Request deletion of your personal information
Opt out of the sale of personal information — we do not sell your data
Non-discrimination for exercising your privacy rights

To exercise these rights, contact support@byteboom.ai with the subject line “Privacy Rights Request”. We may need to verify your identity before fulfilling a request.

13. International Data Transfers

Our operations use cloud-based servers and infrastructure, including third-party service providers, that may be located in countries other than your own. By using the Services, you consent to your Personal Information being transferred, processed, and stored anywhere in the world, including countries with different data protection laws than your jurisdiction.

We protect transferred information as described in this Privacy Policy. We do not represent that the Services are appropriate or available in every jurisdiction.

14. Changes to This Privacy Policy

We may revise, modify, or replace this Privacy Policy from time to time to reflect changes to our business, the Site, the Services, or applicable laws. The revised policy will be effective as of the published effective date.

If a revision includes substantial changes, we will provide prior notice by posting an update on our website, through the app, or by email where appropriate. Continued use of the Services after the effective date constitutes acceptance of the updated policy.

15. Contact Us

If you have questions about this Privacy Policy, our data practices, or your Account information, please contact us:

ByteBoom AI
Email: support@byteboom.ai
Subject: Privacy Policy Inquiry

You may review and correct personal information associated with your Account by logging into your dashboard or contacting us directly.