Privacy Policy

1. Introduction

FundFuel ("we", "us", "our") operates the website fundfuel.io and the FundFuel platform (the "Service"). This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our Service. By using FundFuel, you agree to the collection and use of information in accordance with this policy.

2. Data We Collect

We collect the following categories of data to provide and improve our Service:

• Account Data — Your email address and hashed password, managed securely via Supabase Auth. We never store your password in plaintext.
• Trading Configuration — Symbol preferences, buy/sell thresholds, and trade amounts you configure within the platform.
• API Keys — Your Binance API key and secret. These are encrypted with AES-256 encryption and are never stored in plaintext.
• Telegram Chat ID — If you choose to link your Telegram account for notifications.
• Subscription & Billing Data — Your subscription status and billing information, managed by Stripe. We do not store your credit card numbers or full payment details on our servers.

3. How We Use Your Data

We use the data we collect for the following purposes:

• To execute trades on your behalf based on your configured thresholds
• To send you real-time notifications about trade activity via Telegram
• To manage your subscription and process payments through Stripe
• To authenticate your identity and secure your account
• To improve and maintain the reliability of our Service

4. Data Storage

All data is stored in a Supabase-managed PostgreSQL database hosted in the EU region. Your API keys are encrypted at rest using AES-256 encryption. We employ industry-standard security practices to protect your data from unauthorised access, alteration, or destruction.

5. Third-Party Services

We rely on the following third-party services to operate the platform. Each has its own privacy policy governing how they handle your data:

6. Your GDPR Rights

If you are located in the European Economic Area (EEA), you have the following rights under the General Data Protection Regulation (GDPR):

• Right to Access — Request a copy of the personal data we hold about you
• Right to Rectification — Request correction of inaccurate or incomplete data
• Right to Erasure — Request deletion of your personal data
• Right to Data Portability — Request your data in a structured, machine-readable format

To exercise any of these rights, please contact us at support@fundfuel.io. We will respond to your request within 30 days.

7. Data Retention

We retain your personal data for as long as your account is active or as needed to provide you with our Service. If you delete your account, all associated personal data will be permanently removed from our systems within 30 days of account deletion.

8. Cookies

FundFuel does not use tracking cookies or any third-party analytics cookies. The only client-side storage we use is localStorage via the next-themes library to remember your preferred theme (dark or light mode). This data never leaves your browser.

9. Children

Our Service is not intended for use by anyone under the age of 18. We do not knowingly collect personal data from children under 18. If we become aware that we have collected data from a child under 18, we will take steps to delete that information promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you via email at the address associated with your account. We encourage you to review this policy periodically. Continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact

If you have any questions about this Privacy Policy or your personal data, please contact us at: