Privacy policy

Who is responsible

Ashto Labs Inc, 447 Sutter St, Ste 506 - 1469, San Francisco, CA 94108, is responsible for your personal data. Contact us about privacy at [email protected].

What we collect

• Account details: your email or phone number, or your Google or Apple sign-in, and your language.
• Your strategies: chats, strategy cards, settings, agent logs and reports.
• Exchange data: the API keys you connect (encrypted), balances, orders and trades the exchange reports.
• Billing details: your plan and billing country. Card and bank details go to our payment processors, not to us.
• Messages you send us through forms or email.
• Website use: pages visited, device and browser details, and your approximate country from your IP address.

Why we use it

• To run your agents, alerts, backtests and reports (our contract with you).
• To bill you, prevent fraud and meet tax and legal duties (legal obligation).
• To keep the service secure and improve it (legitimate interests).
• To measure and advertise our website through cookies (consent, which you can withdraw).
• To show prices and the right company for your country (legitimate interests).

Cookies and analytics

This website uses Google Tag Manager, Google Analytics, Google Ads, the Meta Pixel, LinkedIn Insight Tag and PostHog to measure visits and advertising. They are on unless you turn them off; use "Cookie settings" in the footer to choose at any time. Your choice is stored in a cookie shared with the TradeCorgi app.

Who we share it with

• Service providers that host, email, analyse and support the service for us, under contract.
• Payment processors: Stripe, Razorpay and our stablecoin payment processor.
• Your exchange, when your agent places orders you set up.
• Authorities, when the law requires it.

We do not sell your personal data.

Where it is stored

We run servers in Japan and the United States, close to the exchanges. When data leaves your country we use the safeguards the law requires, such as standard contractual clauses.

How long we keep it

Account and strategy data for as long as your account is open, and then only as long as the law requires, for example billing and tax records. Form messages for up to 2 years. Country lookups from IP addresses are cached in hashed form for up to 24 hours.

Your rights

You can ask to access, correct, delete or export your data, object to or restrict its use, and withdraw consent at any time. In India you can also nominate someone to act for you and raise a grievance with our grievance officer. Write to [email protected]; we answer within one month. You can also complain to your data protection authority.

Security and age

Exchange keys are encrypted with a key unique to you and decrypted only inside the service that places orders. TradeCorgi is for adults; we do not knowingly collect data from anyone under 18.

Changes

We will tell you about material changes before they take effect.