Privacy Policy
1. Who is responsible
the operator of this RioAlgo service operates this service and is responsible for your personal data. Contact: the support address shown on this website.
2. What we collect
Your e-mail address; a one-way hash of your password (never the password itself); your Google account identifier if you sign in with Google; the IP address and browser of sign-ins, of consents and of security events; your credit ledger, payment orders and USDT transaction ids; the analyses you run; and, if you use automated trading, your exchange API keys (encrypted), balances, orders and positions read from the exchange.
3. Why
To provide the service and your account, to take payments, to keep the service secure (rate limits, fraud and bot protection), to meet legal and accounting duties, and to improve the analyses. Fills of orders are also used, without your identity, to measure the slippage of an exchange for every customer.
4. Who receives data
The exchanges you connect (through your own keys), the payment network (public blockchain transactions), the e-mail provider that delivers our messages, Google if you use its sign-in, and the AI providers that write analyses (they receive market data, not your identity). We do not sell personal data.
5. How long
Account data for as long as the account exists. Payment, credit and trading records are financial records and are kept for the period the law requires, also after an account is deleted. Security logs for a limited time.
6. Your rights
You can access, correct and export your data, object to some uses, and request deletion (My account → Delete account). Write to the support address shown on this website. You may also complain to the data protection authority of the country in which the operator is established.
7. Security
Passwords are hashed, exchange secrets and service keys are encrypted, two-factor authentication is available, and sessions can be ended everywhere. No system is perfectly secure: tell us at once if you think your account is at risk.