Privacy Policy

1. Introduction

SharifBot ("we", "our", or "us") is committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, store, and share your information when you use our website at sharifbot.com and our automated trading signal service (collectively, the "Service").

By accessing or using the Service, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with its terms, please discontinue use of the Service immediately.

We are registered in England and Wales and process personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Information We Collect

Account Information

When you create a SharifBot account, we collect:

• Full name and email address
• Password (stored as a one-way cryptographic hash — we never store your plaintext password)
• Billing address and payment details (processed by our payment processor; we do not store raw card numbers)
• Country of residence

Exchange API Keys

To execute our trading strategies on your behalf, you may provide API keys from supported exchanges such as Binance or Coinbase. These keys are encrypted at rest using AES-256 encryption and are never stored in plaintext. We exclusively request read-only and trade-execution permissions — we never request or hold keys with withdrawal authority.

Usage Data

We automatically collect certain technical information when you interact with the Service, including:

• IP address and approximate geographic location (country/city level)
• Browser type, operating system, and device identifiers
• Pages visited, features used, and time spent on the Service
• Referring URLs and search terms used to find the Service
• Error logs and crash reports to help us identify and fix bugs

Trading and Exchange Data

To provide performance analytics and portfolio summaries, we retrieve account balance snapshots and trade history from your connected exchange via the API. This data is stored securely and used solely to power your SharifBot dashboard.

Communications

If you contact us via our contact form, email, or any other channel, we retain the content of your message and your contact details in order to respond to you and maintain a record of our correspondence.

3. How We Use Your Information

We use the personal data we collect for the following purposes:

• Service delivery: to execute automated trading strategies on connected exchanges, provide your dashboard, and manage your subscription.
• Account management: to authenticate your identity, process payments, and send transactional notifications such as trade confirmations and subscription receipts.
• Customer support: to respond to enquiries, troubleshoot issues, and improve the quality of our support.
• Security: to detect and prevent fraudulent activity, unauthorised access, and abuse of the Service.
• Service improvement: to analyse usage patterns (in aggregate and anonymised form where possible) to develop new features and enhance existing ones.
• Legal compliance: to meet our obligations under applicable laws and regulations, including financial services regulations where relevant.

We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects on you.

4. Data Sharing

We may share your information only in the following limited circumstances:

• Cryptocurrency exchanges: Your API keys are transmitted to the relevant exchange (e.g., Binance, Coinbase) solely to execute the trading signals generated by the Service on your account.
• Payment processors: Payment information is handled by our third-party payment processor (currently Stripe). We share only the minimum data required to complete your transaction. Stripe's privacy policy is available at stripe.com/privacy.
• Infrastructure providers: We use cloud hosting and monitoring services to operate the platform. These providers process data on our behalf under data processing agreements and are not permitted to use your data for their own purposes.
• Legal requirements: We may disclose your information if required to do so by law, court order, or in response to a valid request from a governmental or regulatory authority.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of our assets, your data may be transferred as part of that transaction. We will notify you of any such change and the options available to you.

5. API Key Security

We take the security of your exchange API keys extremely seriously. Our approach:

• Keys are encrypted at rest using AES-256 encryption with unique per-user key derivation.
• Keys are transmitted only over TLS-encrypted connections.
• We request only the minimum permissions required: read access to balances/history and trade execution. We never request withdrawal permissions.
• API keys are stored in isolated, access-controlled environments separate from our application database.
• Our employees do not have access to your decrypted API keys outside of automated system processes.
• You can revoke your API key from your exchange at any time; the SharifBot service will cease to function on your account until a new key is provided.

We strongly recommend that you create a dedicated API key for SharifBot with only the permissions described above, and that you enable IP whitelisting on your exchange if that feature is available.

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service. Specifically:

• Account data: retained for the duration of your subscription plus 90 days after cancellation, to allow for account reactivation or dispute resolution.
• API keys: deleted immediately upon account cancellation or upon your request.
• Trading history and balance snapshots: retained for up to 24 months to provide historical performance analytics; you may request earlier deletion.
• Billing records: retained for 7 years to comply with UK financial and tax regulations.
• Support correspondence: retained for 3 years.

When data is no longer required, we securely delete or anonymise it so that it can no longer be linked back to you.

7. Your Rights (GDPR)

Under UK GDPR, you have the following rights in relation to your personal data:

• Right of access: You can request a copy of the personal data we hold about you.
• Right to rectification: You can ask us to correct inaccurate or incomplete data.
• Right to erasure ("right to be forgotten"): You can request that we delete your personal data, subject to certain legal obligations.
• Right to data portability: You can request your data in a structured, commonly used, machine-readable format.
• Right to restrict processing: You can ask us to limit how we use your data in certain circumstances.
• Right to object: You can object to our processing of your data where we rely on legitimate interests as our legal basis.
• Rights related to automated decision-making: You have the right not to be subject to solely automated decisions that significantly affect you.

To exercise any of these rights, please contact us at support@sharifbot.com. We will respond within 30 days. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.

8. Cookies

We use cookies and similar tracking technologies to operate and improve the Service. The categories we use are:

• Strictly necessary cookies: Required for the Service to function — for example, session authentication cookies. These cannot be disabled.
• Analytics cookies: Help us understand how visitors interact with the Service (e.g., pages visited, time on site). We use anonymised, aggregated data only. You may opt out via our cookie banner.
• Preference cookies: Remember your settings and preferences to personalise your experience.

You can control cookies through your browser settings or our cookie consent tool. Disabling strictly necessary cookies will impair the functionality of the Service. For more information about cookies, visit allaboutcookies.org.

9. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or our data practices, please reach out:

• Email: support@sharifbot.com
• Contact form: sharifbot.com/pages/contact
• Response time: We aim to respond to all privacy-related enquiries within 5 business days.

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or by displaying a prominent notice on the Service prior to the changes taking effect. Your continued use of the Service after the effective date of any changes constitutes your acceptance of the updated Policy.