Privacy Policy

1. What data we collect

• Email address — used for registration, authorization, and bot operation notifications.
• Cryptocurrency exchange API keys (MEXC, Bybit) — provided voluntarily by the user to connect the trading bot. Keys must have trading permissions only; withdrawal permission is not required and is not requested.
• Trading data and trade history — orders, positions, and trading statistics generated while the bot is running.
• Technical data — IP address, browser type, and session data required to keep the service secure and working correctly.

2. How we store and protect API keys

API keys are stored in encrypted form using strong encryption algorithms. Access to keys is strictly limited: they are used only to perform trading operations on behalf of the user according to the configured strategies.

We do not transfer API keys to third parties, do not use them for operations outside trading, and do not request withdrawal access. The user can revoke keys at any time in the exchange settings or delete them from the Bybot account.

3. Third-party data

The website uses Yandex Metrica, a web analytics service provided by Yandex. Yandex Metrica collects anonymized visit, traffic source, and user action data to help us improve the service. Yandex’s privacy policy is available at yandex.com/legal/confidential.

We do not sell or transfer users’ personal data to advertising networks or other third parties, except where required by applicable law.

4. How we use data

• Providing and improving trading bot functionality.
• Sending notifications about bot operation and account status.
• Protecting accounts and preventing fraud.
• Analyzing aggregated service usage statistics.
• Complying with applicable legal requirements.

5. User rights

You have the right to:

• Access the personal data we process about you.
• Correct inaccurate or outdated data.
• Delete your account and all related data on request. To do this, contact us at info@bybot.me with the subject “Account deletion”.
• Revoke API keys at any time through your Bybot account or the exchange settings.

We will process data deletion requests within 30 days of receiving them.

6. Data retention

Data is stored while the account remains active. After account deletion, all personal data, including API keys and trade history, is deleted from our systems within 30 days unless applicable law requires otherwise.

7. Policy changes

We may update this Policy. If material changes are made, we will notify users by email or through a service notification. Continued use of Bybot after the changes take effect means acceptance of the updated Policy.

8. Contacts

For questions related to personal data processing, contact us at: info@bybot.me