1. Data Controller

The data controller responsible for your personal information is:

2. Data We Collect

We collect the following categories of personal data when you use BotNexis:

• Identity data: full name, email address, phone number, country
• Purchase data: selected plan, payment confirmation (via Stripe), Stripe session ID
• Configuration data: exchange selection, selected trading pairs, trading mode, risk profile, onboarding notes
• API credentials: public API key (readable), API secret and passphrase (encrypted before storage, never logged or emailed)
• Support data: messages submitted via contact form, subject, reason for contact
• Technical data: IP addresses, browser type, access logs for security and fraud prevention purposes

3. API Credentials — Special Notice

4. Purposes of Processing

• Processing and fulfilling software license purchases
• Delivering onboarding services and configuring the BotNexis system
• Sending payment confirmations and onboarding communications
• Providing customer support
• Fraud prevention and account security
• Legal compliance and record-keeping obligations
• Security monitoring and abuse prevention

5. Third-Party Services

• Stripe: Payment processing. Stripe handles all card data. We receive only a payment confirmation and session ID. Stripe's privacy policy applies at stripe.com/privacy.
• Cloudflare: DNS resolution, DDoS protection, CDN, and security services. Cloudflare's privacy policy applies at cloudflare.com/privacypolicy.
• Hosting and email providers: We use reputable infrastructure providers for server hosting and transactional email delivery. These providers process data only on our behalf and under our instructions.

6. Data Retention

We retain your personal data only as long as necessary for the purposes described above:

• Active client data is retained for the duration of the service relationship
• Payment records are retained as required by applicable accounting and tax regulations
• Support records are retained for up to 24 months
• Security and fraud prevention logs are retained for up to 12 months
• Upon verified deletion request, personal data is removed within 30 days except where legal retention obligations apply

7. Your Rights (GDPR)

If you are located in the European Economic Area or United Kingdom, you have the following rights regarding your personal data:

To exercise any of these rights, contact us at support@botnexis.com. We will respond within 30 days.

8. Cookies and Tracking

BotNexis uses minimal technical cookies necessary for site functionality and security. We do not use advertising cookies or third-party tracking pixels. Security logs may record IP addresses and access timestamps for fraud prevention purposes.

9. International Transfers

ColorShield ID LLC is based in the United States. If you are accessing BotNexis from the European Economic Area, your data may be transferred to and processed in the United States. We take appropriate measures to ensure adequate protection of your data in accordance with applicable law.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The effective date at the top of this page will reflect the latest revision. Continued use of BotNexis after changes constitutes acceptance of the updated policy.

11. Contact

For privacy-related inquiries or to exercise your rights, contact us at support@botnexis.com.