Privacy Policy

This Privacy Policy explains how TradeBee ("we", "us") collects, uses, and protects personal data when you use Chart TradeBee. We act as the data controller for the personal data described below.

This Policy is written to comply with the EU General Data Protection Regulation (GDPR) and applicable Greek data protection law.

Account data: email address, password (stored as a hash, never in plain text), account creation date, email verification status.

Exchange connection data: exchange API key and API secret, stored encrypted at rest. These credentials are used only to place, monitor, and close trades on your behalf and to read your account balance — never to withdraw funds.

Trading and usage data: selected strategies, position size and leverage settings, trade history, profit/loss records, bot activity logs, credit balance and transaction history, chart analysis requests and results.

Payment data: we do not store your card details. Payments are processed by Stripe, our payment processor. We retain records of transaction amounts, dates, and credit packages purchased for accounting and support purposes.

Technical data: IP address, browser type, device information, and usage logs collected automatically for security, debugging, and service-improvement purposes.

• To provide the Service: executing trades per your instructions, running chart analysis, managing your credit balance.
• To communicate with you: transactional emails (verification, purchase confirmations, alerts about your bot activity).
• To maintain security: detecting fraud, abuse, or unauthorized access.
• To comply with legal obligations, including accounting and tax record-keeping.

• Contract performance — processing needed to provide the Service you signed up for.
• Legitimate interest — security monitoring, fraud prevention, service improvement.
• Legal obligation — accounting and tax records.
• Consent — where applicable.

We share personal data only with the following categories of recipients, and only as needed to operate the Service:

• Stripe (payment processing)
• MEXC (the exchange you connect — receives only the trade instructions your account sends, not your Chart TradeBee login credentials)
• Our hosting and infrastructure providers (Firebase/Google Cloud, Render, Vercel)
• AI providers used to generate chart analysis, described in detail in the next section — we do not send your exchange API credentials to these providers.

We do not sell personal data to third parties.

When you use the chart analysis feature, some of the information involved is sent to third-party AI providers to generate the analysis. This only happens when you actively request an analysis — it is never triggered automatically by the trading bot or in the background.

We use Google (Gemini) as our primary AI provider, for both reading your uploaded chart and producing the final trade plan. We use OpenAI only as a backup, and only for producing the final trade plan — it is used solely if Google's service fails to return a valid result after being retried.

What is sent, by step:

• Reading your chart (Google only): the ticker symbol, the timeframe you selected, technical indicators calculated from public market data (such as moving averages, support/resistance levels, and the current price), and the chart image you upload. Image metadata (such as camera or device information, if present) is automatically stripped before the image is sent.
• Producing the trade plan (Google, or OpenAI as backup): the written analysis from the previous step, your selected strategy (for example, "Scalping"), and the same technical indicators. No image is sent at this step.

The following is never sent to any AI provider:

• Your user ID, email address, or IP address
• Your exchange API credentials, encrypted or otherwise
• Your account balance, position sizes, or trade history
• Any other information that identifies you personally

You can read Google's and OpenAI's own privacy policies for how they handle data sent to their services: Google Privacy Policy and OpenAI Privacy Policy.

Account and trading data is retained for as long as your account is active, plus a limited period after closure as required for legal and accounting purposes. Exchange API credentials are deleted upon disconnection or account deletion.

Subject to applicable law, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data, subject to our legal retention obligations
• Object to or restrict certain processing
• Request a copy of your data in a portable format
• Withdraw consent at any time where processing is based on consent
• Lodge a complaint with the Hellenic Data Protection Authority (Αρχή Προστασίας Δεδομένων Προσωπικού Χαρακτήρα) or your local supervisory authority

To exercise these rights, contact us at support@tradebee.app.

• Exchange API credentials are stored encrypted at rest.
• Passwords are hashed, never stored in plain text.
• Access to production data is limited to what is necessary to operate the Service.

The Service is not directed at individuals under 18, and we do not knowingly collect data from anyone under 18.

We may update this Privacy Policy from time to time. Material changes will be notified via email or in-app notice.

For any questions about this Privacy Policy or to exercise your rights, contact support@tradebee.app.