Privacy Policy

We collect the following information when you use BOTINA:

• Account information: Email address, name (optional), and hashed password
• Binance API keys: Your API key and secret, encrypted with AES-256-GCM before storage
• Trading data: Bot configurations, trade history, positions, and performance metrics
• Usage data: Language preference stored in a browser cookie

Your information is used exclusively for:

• Authenticating your account and managing your session
• Connecting to Binance to execute your trading strategies
• Displaying your trading performance and account statistics
• Sending you service-related notifications
• Improving the platform based on aggregate usage patterns

Your data is stored with the following security measures:

• Binance API keys: Encrypted using AES-256-GCM encryption with a unique initialization vector per key. Keys are never stored in plaintext.
• Passwords: Hashed using bcrypt with 12 rounds of salting. We never store or have access to your plaintext password.
• Database: PostgreSQL with encrypted connections. All monetary values stored with high precision (18 digits, 8 decimal places).
• Infrastructure: Hosted on secure servers with firewall protection and restricted access.

We do not sell, rent, or share your personal data with third parties. Your data is only shared with:

• Binance: Your API keys are used to execute trades on your behalf via the Binance API. We only send trading commands; no personal data is shared.
• Law enforcement: Only when required by law or valid legal process.

BOTINA uses minimal cookies. We use a single cookie (botina-locale) to store your language preference (English or Croatian). This cookie:

• Contains only your language code ("en" or "hr")
• Expires after 365 days
• Is not used for tracking or analytics
• Is strictly functional

A session cookie is also used for authentication purposes and is deleted when you log out or close your browser.

We retain your data as follows:

• Account data: Retained as long as your account is active. Deleted upon account closure request.
• Trading history: Retained for the lifetime of your account for performance tracking and reporting.
• API keys: Immediately deleted when you remove them from Settings or close your account.

In accordance with GDPR and applicable privacy regulations, you have the right to:

• Access: Request a copy of all personal data we hold about you
• Rectification: Update or correct your personal information
• Erasure: Request deletion of your account and all associated data
• Portability: Request your data in a machine-readable format
• Objection: Object to specific uses of your data

To exercise any of these rights, contact us at support@botina.matiela.net

BOTINA is not intended for use by anyone under 18 years of age. We do not knowingly collect personal information from children.

We may update this Privacy Policy from time to time. We will notify users of material changes via the platform. Continued use of the Service after changes constitutes acceptance of the updated policy.

For privacy-related questions or requests, contact us at: support@botina.matiela.net