Privacy Policy

1. Data We Collect

EdgeFlow collects the minimum information necessary to provide and improve the Service. The data we may collect includes:

• Registration data: email address and username when creating an account.
• Usage data: pages visited, features used, configured indicators, monitored trading pairs and platform preferences.
• Technical data: IP address, browser type and version, operating system, time zone and session performance data.
• Payment data: Stripe processes and stores payment information. EdgeFlow does not store card numbers or banking data directly.
• Cookies and similar technologies: session identifiers and user preferences.

2. How We Use Data

We use the collected information for the following purposes:

• Provide, operate and maintain the Service.
• Manage your account and process subscriptions.
• Send transactional notifications (payment confirmations, service changes, security alerts).
• Personalize the user experience (terminal layout, alerts, saved settings).
• Analyze platform usage to improve functionality and performance.
• Prevent fraud, abuse and unauthorized use.
• Comply with applicable legal obligations.

We do not sell, rent or share your personal data with third parties for advertising purposes.

3. Third-Party Service Providers

To operate the platform, we share limited data with the following providers:

• Stripe — Payment processing and subscription management. Stripe operates under its own privacy policy and complies with PCI-DSS.
• Google — OAuth authentication. We receive your email and profile name only.
• Binance / Bybit API — Real-time market data retrieval. No personal data is shared with exchanges; only public market queries are made.

4. Cookies

EdgeFlow uses the following types of cookies:

• Essential cookies: necessary for platform operation, session authentication and security (CSRF). Cannot be disabled.
• Preference cookies: store user settings such as visual theme, terminal layout and favorite pairs.

You can manage cookies from your browser settings. Disabling essential cookies may affect the functioning of the Service.

5. Data Security

We implement technical and organizational measures to protect your data, including:

• Data encryption in transit via TLS/HTTPS.
• API keys encrypted with AES-256-GCM at rest.
• Restricted access to personal data for authorized personnel only.
• Access monitoring and activity auditing on infrastructure.

No system is completely invulnerable. While we take reasonable precautions, we cannot guarantee absolute security of transmitted or stored information.

6. Data Retention

We retain your personal data while your account remains active or as needed to provide the Service. After account deletion:

• Personal data is deleted within 30 days.
• Billing data is retained for the legally required period (generally 5 years) to comply with tax and accounting obligations.
• Anonymized activity records may be retained for statistical purposes.

7. User Rights

You have the right to:

• Access: request a copy of the personal data we hold about you.
• Rectification: correct inaccurate or incomplete data from your account settings or by contacting us.
• Deletion: request deletion of your account and associated personal data.
• Portability: receive your data in a structured, machine-readable format.
• Objection: object to the processing of your data for specific purposes.

To exercise any of these rights, send a request to support@edgeflow.app. We will respond within a maximum of 30 days.

8. Contact

For inquiries about this Privacy Policy or the handling of your personal data, you can contact us at:

support@edgeflow.app