Privacy Policy

1. Information We Collect

We collect information in three ways: (a) information you provide, (b) information collected automatically when you use the Service, and (c) information from third parties (such as identity and payment providers).

1.1 Information you provide

• Account information: name, email address, and profile image (if provided).
• Exchange credentials: trading-scoped API keys or delegated signing keys you upload. These are encrypted at rest and used only to execute your strategies on the venues you have independently connected.
• Strategy and deployment data: strategies you upload, deployment configuration, and related metadata.
• Support and communications: information you send us (e.g., emails, bug reports, feature requests), which may include logs or snippets you choose to share.

1.2 Information collected automatically

• Usage and diagnostics: information about how you use the Service (for example, deployments you create, lifecycle actions you take, API activity, and performance or diagnostic signals) to operate, secure, and improve the Service.
• Bot telemetry: PnL, fills, open positions, and risk state from your deployments, used to power the dashboard and support operations.
• Security and fraud prevention data: information used to protect accounts, prevent abuse, enforce rate limits, and maintain the integrity of the Service.

1.3 Information from third parties

• Identity provider (Google): basic profile information used for login.
• Payment provider (Stripe): billing status, subscription details, invoices or receipts, and limited payment-related information. We do not receive or store your full card number. Payment information is processed directly by Stripe.

2. How We Use Information

We use the information we collect to:

• Provide, operate, and improve the Service.
• Authenticate you and secure your account.
• Process subscriptions, billing, and refunds through Stripe.
• Execute trades on your behalf using the exchange credentials you provide.
• Send service-related communications (receipts, security alerts, policy updates).
• Detect, investigate, and prevent fraud, abuse, and violations of our Terms of Service.
• Comply with legal obligations.

We do not sell your personal information, and we do not use it to train third-party machine-learning models.

3. Legal Bases (GDPR)

If you are in the European Economic Area, United Kingdom, or another jurisdiction with similar laws, we process your personal information on the following legal bases: contract performance (to provide the Service you signed up for), legitimate interests (to secure, improve, and operate the Service), consent (where required, such as for optional communications), and legal obligation (to comply with applicable law).

4. How We Share Information

We share personal information only as described below. We do not sell your information to third parties.

• Service providers. We use trusted vendors to operate the Service, including Stripe, Inc. (payments), Google LLC and Firebase (authentication, hosting, database), and Amazon Web Services, Inc. (compute, storage, and secrets management). These providers process data on our behalf under contractual obligations.
• Exchanges and venues. When you deploy a bot, the Service places orders and queries data on the venue you target (e.g., Hyperliquid, Polymarket) using credentials you provide. The venue receives trading activity from your bot.
• Legal requirements. We may disclose information when required by valid legal process, to protect our rights, to prevent fraud, or to ensure the security of the Service and its users.
• Corporate transactions. If Rombi is involved in a merger, acquisition, or sale of assets, user information may be transferred, subject to the terms of this policy.

5. Data Retention

We retain account, subscription, and deployment records for as long as your account is active and for a reasonable period afterward to meet legal, accounting, and dispute-resolution obligations. You can request deletion of your account by emailing support@poochon.xyz; some information (such as billing records) may be retained for as long as required by law.

6. Security

We use reasonable technical and organizational measures designed to protect personal information and the Service, including access controls, encryption in transit and at rest, and monitoring for abuse. However, no system is completely secure, and we cannot guarantee absolute security.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access a copy of the personal information we hold about you.
• Correct inaccurate or incomplete information.
• Request deletion of your information (subject to legal retention requirements).
• Object to or restrict certain processing.
• Receive a portable copy of your data.
• Withdraw consent where we rely on consent as the basis for processing.

To exercise these rights, email support@poochon.xyz. We may ask for information to verify your identity before acting on a request.

8. Children

The Service is intended for users at least 18 years old. We do not knowingly collect personal information from anyone under 18. If we learn we have collected such information, we will delete it.

9. Cookies and Similar Technologies

We use only essential cookies and local storage needed to keep you signed in and to remember your preferences. We do not currently use cookies for cross-site advertising or behavioral tracking. If this changes in the future, we will update this policy and obtain consent where required.

10. International Transfers

Our primary infrastructure is hosted in the United States (and, for certain deployments you select, in other AWS regions such as Tokyo). If you access the Service from outside the United States, your information will be transferred to and processed in the country where our servers and providers are located. We rely on appropriate safeguards (such as standard contractual clauses) where required by law.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated “Last updated” date; significant changes may also be communicated by email to the address associated with your account. Your continued use of the Service after changes take effect constitutes acceptance of the revised policy.

12. Contact

Questions about this Privacy Policy or our data practices? Contact support@poochon.xyz.