Privacy Policy
Last updated: September 3, 2026 · Effective immediately
This Privacy Policy describes how TrickyX.ai ("TrickyX.ai", "we", "us", or "our") collects, uses, and shares information about you when you use our website (https://trickyx.ai), mobile application, and trading bot services (collectively, the "Service").
1. Information We Collect
a. Account Information
When you register, we collect your name, email address, and password (stored as a bcrypt hash — we never store plain-text passwords). You may optionally provide a phone number.
b. Binance / BingX API Keys
To enable automated trading, you provide your exchange API key and secret. These are encrypted at rest using AES-256 encryption before storage. We never use your API keys for anything other than executing trades on your behalf.
c. Trading & Financial Data
We store records of trades executed by the bot, including symbol, price, quantity, profit/loss, and timestamps. This data is used to display your trade history and calculate statistics.
d. Payment Information
We process crypto payments via NOWPayments. We do not collect or store credit/debit card numbers. We store payment status, amounts, and wallet addresses for reconciliation purposes.
e. Device & Push Notification Tokens
If you enable push notifications, we store your device push token (FCM token) to send trade alerts and bot status updates. These tokens are associated with your account and deleted when you disable notifications or delete your account.
f. Usage Data
We collect log data including IP addresses, browser/app type, pages visited, and timestamps when you interact with the Service. This data is used for security monitoring and debugging.
g. Referral Data
We track referral relationships (which user referred whom) to calculate multi-level commissions. We store referral codes and the users who used them.
2. How We Use Your Information
We use the information we collect to:
- Create and manage your account
- Execute automated cryptocurrency trades on your behalf via your connected exchange
- Send OTP verification codes and password reset emails
- Send push notifications for trade opens, closes, bot status changes, and platform announcements (only if you opt in)
- Calculate and credit referral commissions
- Process deposit and withdrawal requests
- Provide customer support
- Detect, prevent, and investigate fraud or unauthorized activity
- Comply with legal obligations
We do not sell your personal data to third parties. We do not use your data for advertising.
3. Third-Party Services
We share limited data with these third-party providers to operate the Service:
| Provider | Purpose | Data Shared |
|---|---|---|
| MongoDB Atlas | Database hosting | All user and trade data (encrypted at rest) |
| Binance / BingX | Trade execution | Your API key & secret (encrypted), order parameters |
| NOWPayments | Crypto payment processing | Payment amount, currency, wallet address |
| Firebase (Google) | Push notifications | Device FCM push token |
| Hostinger SMTP | Transactional email | Your email address, OTP codes |
| Groq AI | Trade sentiment analysis | Market symbol name only — no personal data |
Each provider has their own privacy policy. We are not responsible for their data practices.
4. Data Security
- Passwords are hashed with bcrypt and never stored in plain text
- API keys are encrypted with AES-256 before storage
- All data in transit is protected by TLS/HTTPS
- Session tokens are stored as httpOnly cookies to prevent XSS access
- On mobile, sensitive tokens are stored in Expo SecureStore (iOS Keychain / Android Keystore)
- We conduct regular security reviews of our codebase and infrastructure
While we take reasonable precautions, no method of transmission over the internet is 100% secure. Use the Service at your own risk.
5. Data Retention
We retain your data for as long as your account is active. If you delete your account:
- Personal information (name, email, API keys) is deleted within 30 days
- Anonymised trade records may be retained for analytics purposes
- Payment records may be retained for up to 7 years for tax and legal compliance
6. Cookies
We use session cookies for authentication only. We do not use tracking, advertising, or analytics cookies. You can disable cookies in your browser, but this will prevent you from logging in to the Service.
7. Your Rights
You have the right to:
- Access — request a copy of the personal data we hold about you
- Correction — update or correct inaccurate personal data via your Profile settings
- Deletion — request deletion of your account and associated personal data
- Portability — request your trade history and account data in a machine-readable format
- Objection — opt out of push notifications at any time in Notification Settings
To exercise these rights, email us at support@trickyx.ai. We will respond within 30 days.
8. Children's Privacy
The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected data from a minor, contact us immediately and we will delete it.
9. International Data Transfers
Your data may be processed in countries other than your own (including India, the United States, and Singapore, where our service providers are located). By using the Service, you consent to this transfer. We ensure appropriate safeguards are in place when transferring data internationally.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by email or via an in-app notification. Continued use of the Service after changes constitutes acceptance of the updated policy. The "Last updated" date at the top of this page will always reflect the most recent revision.
11. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy, please contact us: