How we handle your data.
This Privacy Policy explains how Bearproof (“we”, “us”) collects, uses, stores, shares, and protects information from users (“Users”, “you”) of the website bearproof.io and all products and services we offer (the “Service”). By using the Service you agree to this Policy. If you do not agree, please do not use the Service. Your use of the Service is also governed by our Terms of Service.
Information you provide. Account details such as your username, email address, and password (stored only in hashed form); optional profile data such as a virtual wallet address; subscription and payment records; support messages and correspondence you send us.
Information collected automatically. Non-personally identifiable technical data generated when you interact with the Service, including browser type and version, device type and model, operating system, application version, crash and diagnostic data, notification settings, language, referring pages, and pages viewed.
Device and network information. Device identifiers, IP address, and connection information such as internet service provider and approximate region derived from IP.
Trading data. Configuration you set (strategies, limits, formulas) and trade-related data retrieved from your connected exchange, such as orders, positions, balances, and profit history, so we can operate the bot and show your reports.
You may browse public parts of the Site anonymously. You can always refuse to provide personal information, though this may prevent you from using features that depend on it.
To operate the bot we store the API key and secret you provide for your exchange. These credentials are stored in encrypted form and used solely to read your account data and to place the spot trades you configure. We ask you to grant read and spot-trading permissions only, and never withdrawal permission — meaning the Service cannot move funds out of your exchange account. We never request your exchange login password, two-factor codes, or wallet seed phrase, and you should never share them with anyone, including anyone claiming to be Bearproof staff. You may revoke your keys at your exchange at any time.
We use cookies and similar technologies to keep you signed in, remember preferences such as language, and understand aggregate usage so we can improve the Service. You can set your browser to refuse cookies or to alert you when cookies are sent; if you do, some parts of the Service may not function properly. Where required, we ask for your consent to non-essential cookies and you may change your choice at any time.
We do not sell, rent, or trade your personal information. We share it only in these cases:
We apply appropriate technical and organisational measures to protect against unauthorized access, alteration, disclosure, or destruction of personal information, credentials, and transaction data. Traffic between you and the Service is transmitted over encrypted TLS/SSL channels, passwords are stored hashed, and API secrets are stored encrypted with access restricted to systems that need them. No method of transmission or storage is completely secure, so we cannot guarantee absolute security; please use a strong, unique password and keep your device secure.
We keep personal information for as long as your account is active or as needed to provide the Service, and afterwards only as required for legitimate business purposes such as accounting, dispute resolution, security, and legal compliance. When you delete your account, we delete or anonymise your personal data within a reasonable period, except records we are legally required to retain. Deleting your account does not affect assets or order history held by your exchange.
Subject to applicable law, you may request access to the personal data we hold about you, correction of inaccurate data, deletion of your data, restriction of or objection to certain processing, and a copy of your data in a portable format. You can update most account details in the app, disconnect an exchange or Telegram at any time, and opt out of marketing emails. To exercise these rights, contact us using the details below; we may need to verify your identity before acting, and we will respond within the period required by law.
The Service is not directed to anyone under 18, and we do not knowingly collect personal information from children. If you believe a minor has provided us with personal data, contact us and we will delete it.
We and our service providers may process and store information in countries other than your own, where data-protection laws may differ. Where required, we implement appropriate safeguards for such transfers. By using the Service, you understand that your information may be transferred to and processed in those locations.
We may update this Privacy Policy at any time. When we do, we will revise the “last updated” date at the top of this page and, where the change is material, provide additional notice. You acknowledge that it is your responsibility to review this page periodically. Continued use of the Service after changes take effect constitutes acceptance of the updated Policy.
If you have questions about this Policy, our practices, or your data, contact us at:
© 2026 Bearproof · bearproof.io