BMYBIT LTD - Privacy Policy

Effective Date: February 11, 2025

1. INTRODUCTION

BMYBIT LTD ("BMYBIT," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our automated trading software platform.

Company Information: BMYBIT LTD is a company registered in England and Wales with company number 09931897, located at 54 Kestrel Avenue, London, England, SE24 0EB.

By using our services, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our services.

2. INFORMATION WE COLLECT

2.1. Account Information: When you register, we collect your email address and password (stored using industry-standard encryption).

2.2. API Keys: We collect and securely store your cryptocurrency exchange API keys. These are encrypted at rest using 256-bit encryption. We never request withdrawal permissions.

2.3. Trading Data: We collect trading data from your connected exchange accounts, including balances, trading history, and portfolio performance, necessary to provide our automated trading services.

2.4. Usage Data: We automatically collect information about how you interact with our software, including access times, features used, and error logs.

2.5. Device Information: We may collect device information such as IP address, browser type, operating system, and device identifiers for security and analytics purposes.

3. HOW WE USE YOUR INFORMATION

3.1. Service Provision: We use your information to provide, maintain, and improve our automated trading services.

3.2. Security: We use your information to detect, prevent, and address security issues and fraudulent activity.

3.3. Communication: We use your email address to send important notifications about your account, service updates, and security alerts.

3.4. Legal Compliance: We may use your information to comply with applicable laws, regulations, and legal processes.

3.5. Analytics: We analyze usage patterns to improve our software and user experience (data is anonymized where possible).

4. DATA SECURITY

4.1. Encryption: All sensitive data, including API keys, is encrypted using 256-bit encryption algorithms both in transit (TLS/SSL) and at rest.

4.2. Access Controls: Access to your personal information is restricted to authorized personnel only, on a need-to-know basis.

4.3. No Fund Access: We never request or store withdrawal permissions for your exchange accounts. Your funds remain under your exclusive control.

4.4. Security Measures: We implement industry-standard security measures, including firewalls, intrusion detection systems, and regular security audits.

4.5. Data Breaches: In the unlikely event of a data breach, we will notify affected users and relevant authorities as required by law.

5. DATA SHARING AND DISCLOSURE

5.1. Third-Party Services: We use trusted third-party service providers (cloud hosting, analytics) that process data on our behalf under strict confidentiality agreements.

5.2. No Sale of Data: We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

5.3. Legal Requirements: We may disclose your information if required by law, court order, or governmental authority.

5.4. Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new entity.

5.5. With Your Consent: We may share your information with your explicit consent for specific purposes.

6. YOUR RIGHTS

6.1. Access: You have the right to request access to the personal information we hold about you.

6.2. Correction: You can update your account information at any time through your account settings.

6.3. Deletion: You can request deletion of your account and associated data by contacting us at support@bmybit.com.

6.4. Data Portability: You have the right to receive your data in a structured, commonly used format.

6.5. Objection: You may object to certain types of data processing, though this may limit service functionality.

6.6. UK GDPR Rights: As a UK-registered company, we comply with UK GDPR regulations regarding your data rights.

7. DATA RETENTION

7.1. Active Accounts: We retain your data for as long as your account is active and for a reasonable period thereafter.

7.2. Inactive Accounts: Accounts inactive for 12 months may be deleted, along with associated data, after a 30-day notification period.

7.3. Legal Requirements: We may retain certain data longer if required by law or for legitimate business purposes (e.g., fraud prevention).

7.4. Backups: Data in backup systems may persist for up to 90 days after deletion, after which it is permanently removed.

8. COOKIES AND TRACKING

8.1. Essential Cookies: We use essential cookies for authentication and security. These cannot be disabled.

8.2. Analytics Cookies: We use analytics cookies to understand how users interact with our platform. You can disable these through your browser settings.

8.3. No Tracking: We do not use third-party tracking cookies for advertising purposes.

9. INTERNATIONAL DATA TRANSFERS

Your data may be processed and stored outside the UK/EEA. When we transfer data internationally, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by UK authorities.

10. CHILDREN'S PRIVACY

Our services are not intended for users under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child, we will delete it immediately.

11. CHANGES TO THIS PRIVACY POLICY

11.1. Updates: We may update this Privacy Policy from time to time. Material changes will be communicated via email or platform notification.

11.2. Continued Use: Your continued use of our services after policy changes constitutes acceptance of the updated policy.

11.3. Review Date: This policy was last updated on February 11, 2025.

12. CONTACT US

If you have questions, concerns, or wish to exercise your data rights, please contact us:

Email: support@bmybit.com

Company Name: BMYBIT LTD

Registered Address: 54 Kestrel Avenue, London, England, SE24 0EB

Company Number: 09931897

We aim to respond to all privacy-related inquiries within 30 days.