Last updated: July 29, 2026

Privacy Policy

How we collect, use, and protect your personal information

1. Introduction

1.1. Scope. At Freya Finance, we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information.

1.2. Consent. By using our Platform, you consent to the data practices described in this policy. If you do not agree with this policy, please do not use our services.

2. Information We Collect

2.1. Account Information. When you create an account, we collect your email address, username, and authentication credentials.

2.2. API Keys. We collect exchange API keys used to enable automated trading. You can supply a key yourself, or authorize one on the exchange's own consent screen, in which case the exchange issues the key to us directly and you never type it. Either way we store only trading-enabled keys and never request withdrawal permissions.

2.3. Financial Data. We collect information about your trading activities, account balances, transaction history, and deposits/withdrawals necessary to provide our services.

2.4. Blockchain Data. When you make deposits or withdrawals, we collect and store blockchain-specific data including wallet addresses, transaction hashes, network identifiers, and confirmation statuses. Deposit wallet addresses are uniquely generated and permanently associated with your account.

2.5. Technical Data. We automatically collect IP addresses, browser type, device information, operating system, and platform usage analytics.

2.6. Communication Data. Records of your communications with our support team, including Telegram messages and email correspondence.

2.7. Referral Data. If you participate in our referral program, we collect referral codes, referrer-referee relationships, and commission transaction records.

2.8. Exchange Authorization Data. When you connect an exchange account through that exchange's authorization flow, we receive and store the account identifier the exchange assigns you (for example, your Bybit UID), the permission scope you granted, and the status of the connection attempt. We use these only to link the connection to your Freya Finance account, to show you which exchange account is connected, and to diagnose a failed connection. The exchange's own consent screen may list further profile details, such as an email address, phone number, language preference or profile photo. We do not ask for those, and the integration gives us no way to read them: it hands us the account identifier and the trading credential, and nothing else.

3. How We Use Your Information

3.1. Service Delivery. To operate the Platform, execute trades, process deposits/withdrawals, and manage your account.

3.2. Communication. To send service updates, security alerts, tier notifications, and respond to your inquiries via email and/or Telegram based on your notification preferences.

3.3. Notifications. To send deposit confirmations, withdrawal status updates, trade execution alerts, subscription reminders, and security notifications. You consent to receiving these service-related communications upon registration. Critical notifications cannot be disabled; optional notifications can be managed in your settings.

3.4. Improvement. To analyze usage patterns, optimize user experience, and develop new features.

3.5. Security. To prevent fraud, detect unauthorized access, and enforce our Terms of Service.

3.6. Legal Compliance. To comply with legal obligations, including AML/KYC requirements where applicable.

4. API Key Security

4.1. Encryption. All API keys are encrypted with AES-256 through a managed key service before storage, and the encryption keys are held separately from the database. This applies equally to keys you enter yourself and to keys an exchange issues to us through its authorization flow. Keys are decrypted only when needed to execute a trade on your behalf.

4.2. Access Control. API key access is strictly limited to essential platform functions. Our team cannot view your decrypted keys.

4.3. No Withdrawal Access. We never ask for withdrawal or transfer permissions, and the Platform never calls an exchange's withdrawal or transfer endpoints using your credentials. Your keys are used only to read your account and to place and manage trades. We ask you to create keys with trading permissions only, and you should keep withdrawal disabled on the exchange, since permissions are set on the exchange's side and not by us.

4.4. Security Audits. We conduct regular security audits and penetration testing to ensure data protection.

4.5. Authorization Tokens Are Not Stored. When you connect an exchange through its authorization flow, the authorization code and the access token it produces are used once, in memory, on our servers, solely to obtain your trading credentials. We do not write the authorization code, the access token, or any refresh token to our database, and we do not record them in our logs.

5. Data Sharing and Disclosure

5.1. No Selling. We do not sell your personal information or API keys to third parties under any circumstances.

5.2. Service Providers. We may share data with trusted third-party service providers who assist in operating our Platform, including: hosting and infrastructure, authentication services, email delivery, blockchain node providers for deposit/withdrawal processing, and analytics tools. All providers are contractually bound to protect your data and process it only as instructed by Freya Finance.

5.3. Legal Requirements. We may disclose information if required by law, court order, or government request.

5.4. Business Transfers. In the event of a merger or acquisition, your information may be transferred to the new entity.

5.5. Data Breach Notification. In the unlikely event of a data breach affecting your personal information, we will notify affected users via email and/or Platform notification as soon as reasonably practicable after becoming aware of the breach.

6. Cookies and Tracking

6.1. Essential Cookies. Required for Platform functionality, authentication, and session management.

6.2. Analytics Cookies. Help us understand how users interact with the Platform to improve our services.

6.3. Preference Cookies. Store your settings and preferences for a personalized experience.

6.4. Managing Cookies. You can disable cookies in your browser settings, though this may limit Platform functionality.

7. Data Retention

7.1. Active Accounts. We retain your data for as long as your account is active and you continue using our services.

7.2. Closed Accounts. After account closure, we retain data for a limited period (typically 2 years) for legal compliance and dispute resolution.

7.3. Backtest Data. Backtest history retention varies by tier: Free (7 days), Plus (30 days), Pro (unlimited).

7.4. Anonymization. After the retention period, personal data is either deleted or anonymized for analytical purposes.

8. Your Rights

8.1. Access. You have the right to request a copy of your personal data held by us.

8.2. Correction. You can request correction of inaccurate or incomplete data.

8.3. Deletion. You can request deletion of your personal data, subject to legal retention requirements.

8.4. Portability. You can request your data in a portable, machine-readable format.

8.5. Objection. You can object to certain data processing activities.

8.6. Withdrawal. You can withdraw consent for optional data processing at any time.

8.7. Disconnecting an Exchange. You can remove a connected exchange account from your Freya Finance settings at any time, which deletes the stored credentials for it. You can also revoke the authorization from the exchange's own security settings, which takes effect immediately and independently of us. If bots are still running on that connection, we ask you to stop them before the credentials can be removed, so that a bot holding an open position never loses access to the account it is trading on.

9. International Transfers

9.1. Your data may be transferred to and processed in countries outside your residence. We ensure appropriate safeguards are in place for international data transfers.

9.2. We use cloud infrastructure with data centers globally. Data is stored in secure, certified facilities.

10. Security Measures

10.1. We implement industry-standard security measures including HTTPS encryption, secure authentication, and regular security audits.

10.2. Despite our efforts, no method of transmission over the internet is 100% secure. You are responsible for protecting your account credentials.

11. Children's Privacy

11.1. Our Platform is not intended for users under 18 years of age. We do not knowingly collect data from children.

11.2. If we discover we have collected data from a minor, we will delete it immediately.

12. Marketplace Data

12.1. Creator Data. If you publish strategies on the Marketplace, we collect and display your public profile information (display name, tier) and strategy performance data.

12.2. Strategy Configurations. We store strategy configurations you publish. For "Hidden" visibility strategies, configurations are encrypted and not shared with buyers.

12.3. Purchase Records. We maintain records of all Marketplace purchases including buyer ID, listing ID, price paid, and purchase date for transaction history and creator payouts.

12.4. Performance Tracking. For profit-based pricing, we track trade outcomes to calculate creator earnings. This data is anonymized in aggregate analytics.

12.5. Reviews and Ratings. Reviews you submit are associated with your account and publicly visible. You may not delete reviews but can request edits for factual inaccuracies.

12.6. Report Data. If you report a listing, your user ID is stored with the report for moderation purposes but is not shared with the listing creator.

12.7. Tax Reporting. For creators earning above tax thresholds, we may collect additional identity information (name, address, tax ID) for compliance with tax reporting requirements.

13. Related Documents

13.1. This Privacy Policy should be read in conjunction with our Terms of Service and Risk Disclosure Statement.

13.2. In the event of any conflict between this Privacy Policy and the Terms of Service, the Terms of Service shall prevail.

14. Policy Updates

14.1. We may update this Privacy Policy periodically. Changes will be posted on this page with an updated "Last Updated" date.

14.2. For material changes, we will notify you via email or Platform notification.

15. Contact Us

For privacy-related inquiries or to exercise your rights, please contact:

Freya Finance Support Team

Email: [email protected]

Support: [email protected]

Last updated: July 29, 2026