Data used
We process account identifiers, membership and payment status, encrypted exchange credentials, security events, bot telemetry, support records and notification preferences.
Purpose and safeguards
Information is used to provide the service, enforce access controls, prevent abuse, investigate incidents and meet legal obligations. Sensitive credentials are encrypted and never returned to client screens.
Account and connection records
Account details, notification preferences and encrypted exchange credentials are used while the account and connection remain active. Disconnecting a key revokes platform use of that connection. Revoke the key at the exchange to remove its exchange permissions. Account deletion requests are verified through Support before records are removed or anonymized.
Payment, trading and security records
Payment references, accepted policy versions, execution records and security events are retained while needed to reconcile the account, investigate an open incident or dispute, or satisfy an applicable recordkeeping requirement. A deletion review identifies any records that must remain, the reason and the criterion for their release. These records are not promised to disappear immediately when access ends.
Support and analytics
Support correspondence is retained while the request or a related account issue remains unresolved and while needed to document its resolution. First-party analytics records are reviewed with account deletion requests; aggregated statistics that no longer identify an account may remain.
Backup copies
Daily database copies currently rotate by age over a 14-day local retention setting. Release and recovery archives can have a separate retention period while needed for a verified rollback. Deletion from the active database does not erase earlier backup copies immediately. Recovery must reapply confirmed deletion requests before restored data is used.
Requests and verification
Submit an access, correction or deletion request through Support. Include your account email and the request, but never a password, recovery code or secret API key. The response explains any verification needed and any records that cannot yet be removed.
If anything in this document is unclear, contact the Company through HEDGERON Support before using the service.
OPEN SUPPORT