Privacy Policy

1. Who is responsible

[COMPANY LEGAL NAME], [REGISTERED ADDRESS], is responsible for your personal data in Dukun AI. Contact us at [PRIVACY EMAIL].

2. What we collect

• Account: your e-mail address, and your name if you add one.
• Sign-in and security: one-time code records, session records with IP address and browser type, and an audit log of actions such as creating bots or sending commands.
• What you create and do: strategies, backtests, bots, their settings, positions, trades, equity history, events and alerts.
• Exchange connection (live trading only): your API key in encrypted form and the permissions the exchange reports for it. We never ask for your exchange password, and we can't see your private key in readable form.
• Messages: what you write in bot chats and the replies, and your Telegram chat id if you connect alerts.
• Waitlist: your e-mail if you ask to be told when live trading opens.

3. How we use it

To run the service: sign you in, run your backtests and bots, place orders you configured, show results, send alerts you asked for, answer bot chats, keep the service secure and fix problems. To tell you about important changes to the service or these policies. We don't sell your data and we don't use it for advertising.

4. Legal bases

Where data protection law requires a legal basis: performing our contract with you (running the service), our legitimate interests (security, fraud prevention, improving the service in ways you'd expect), your consent (optional alerts and the waitlist, which you can withdraw), and legal obligations.

5. Who processes it for us

• Cloudflare: hosting, database, file storage and e-mail delivery.
• Amazon Web Services (Tokyo region): our trading engine.
• Anthropic: generating bot chat replies from your question and your bot's data. [CONFIRM RETENTION TERMS]
• Binance: public market data, and, for live bots, the orders sent to your own account.
• Telegram: alert messages, only if you connect it.

Each processes data only to provide its part of the service and under contracts that require them to protect it.

6. International transfers

Our providers operate in several countries, including outside your own. Where the law requires it, we use appropriate safeguards for these transfers.

7. How long we keep it

Account and bot data: while your account exists, and up to 30 days after you delete it, except where we must keep records longer by law. Event history older than 180 days is archived. Sign-in sessions expire after 30 days of inactivity. Encrypted exchange keys are deleted as soon as you remove them or close the bot.

8. Cookies

We use one cookie: your sign-in session. It is necessary for the service to work. We don't use advertising or cross-site tracking cookies.

9. Security

Data is encrypted in transit. Exchange keys are encrypted so only our trading engine can use them, and only with trade permission. Access to production systems is limited and logged. No system is perfectly secure; tell us at [PRIVACY EMAIL] if you find a problem.

10. Your rights

Depending on where you live (for example under Indonesia's Personal Data Protection Law or the GDPR), you can ask to access, correct, export or delete your data, object to or restrict some uses, and withdraw consent. Write to [PRIVACY EMAIL]; we answer within the time the law requires. You can also complain to your data protection authority.

11. Children

Dukun AI is not for anyone under 18, and we don't knowingly collect their data.

12. Changes

We'll post updates here and tell you by e-mail or in the app before material changes take effect.

13. Contact

[COMPANY LEGAL NAME], [REGISTERED ADDRESS], [PRIVACY EMAIL].