Privacy Policy | Feel.Trading

One-Sentence Summary

We only collect the minimum data necessary for the platform to function: your login credentials, chat and backtesting history, and the API keys for your own exchange accounts (stored in encrypted form). We will not sell, rent, or share your personal data or keys with any third party.

1. What Data We Collect

Account Identification: Email, display name, and avatar URL provided by Google OAuth.
Content You Voluntarily Input: Chat conversations, strategy configurations, backtesting settings, and notes.
Exchange API Keys (Optional): If you choose to connect to live/testnet accounts, we receive the API key/secret for your own exchange account. See Section 3 for details.
Technical Data: IP address, browser User-Agent, and access timestamps (used solely for security logs and anomaly detection).
Cookies: Used only for login sessions, language preferences, and UI themes. We do not use third-party marketing trackers.

2. What We Do Not Collect

Your real name, national ID, address, or phone number (unless you voluntarily include them in your conversations).
Your credit card or bank account information (we currently do not charge fees and have no payment processing modules).
Any biometric data.
Your browsing history on other websites.

3. Handling of Exchange API Keys

This section is the most important; please read carefully:

The API keys you enter in /settings are for your own exchange (Binance, etc.) accounts. We do not and cannot open accounts or transfer assets on your behalf.
We strongly recommend that you only enable "Spot/Futures Trading" permissions and do not enable "Withdrawal" permissions. This ensures that even in the event of a database breach, an attacker cannot withdraw your assets.
Keys are encrypted using JWE (JSON Web Encryption, A256GCM) before being written to the database. The encryption key is held in server environment variables and is not written to the source code or the database.
Keys are decrypted only upon your own request to place orders or read account data from the exchange; they are not used for any other purpose.
You may delete your keys at any time via /settings. Once deleted, they are immediately purged from the database with no backups retained.

4. How Data Is Used

To provide core platform functionality (AI chat, strategy backtesting, live/simulated order execution).
To improve the product (aggregated analysis, without personal identification).
To respond to legal obligations (e.g., formal requests from judicial authorities).

We will not use your data for marketing tracking, behavioral targeted advertising, or sell it to any third party.

5. Third-Party Services

The platform sends a limited amount of data to the following services, strictly within the scope of necessity:

Google (OAuth login) — Verifies your email.
Anthropic Claude, Google Gemini (AI analysis) — Only sends your current conversation content and public market data; does not send your API keys or account information.
Binance / OKX / Bybit / Gate and other exchanges (Live order execution and real-time market data) — Uses your authorized API keys to call their official APIs.
CoinGecko / CoinMarketCap / FRED / Binance Public Market Data / News RSS (Public market data retrieval) — Read-only; no data is uploaded.

6. Data Retention

Retained for the duration of your account's validity.
Upon account deletion, your personal data and keys are immediately cleared from the database, with a maximum of 30 days for backups to be purged.
Transaction records (backtesting configurations, order history) may be anonymized and used to improve algorithms.

7. Your Rights

View all your data at any time (via /settings).
Export or delete your data at any time.
If you have concerns regarding our processing methods, please email the contact address below.

8. Minors

This service is not intended for users under the age of 18. We do not knowingly collect data from minors. If discovered, such data will be deleted immediately.

9. Policy Changes

If there are material changes to this policy, we will announce them on this page and update the date at the top. Continued use of the service constitutes your agreement to the new version.

10. Contact Us

For any privacy-related questions, please email [email protected].