Privacy policy

What we collect

When you use the service we store:

• Account data: email address, name and avatar (if provided by Google sign-in), and language preference.
• Bot data: bot configurations, the TradingView alert payloads you send to your webhooks, simulated orders, positions, and risk events.
• Exchange connection data when you add a testnet connection: exchange name, masked key hint, permission status, validation state, and encrypted credentials.
• Technical data: IP-based rate-limit counters and standard server logs for security and abuse prevention.

What we never collect

• Withdrawal access. Withdrawal-enabled exchange keys are rejected.
• Plaintext exchange secrets after validation. Credentials are encrypted at rest and never returned in full.
• Your Pine Script or strategy source code — it stays on TradingView.
• Webhook secrets in plaintext — only a SHA-256 hash is stored, and the secret is shown to you exactly once.
• Payment data — the beta is free and has no checkout.

How we use data

Data is used to operate the service: executing your paper trades, enforcing your risk limits, showing your history, sending in-app notifications, and keeping the platform secure. We do not sell personal data and we do not use it for third-party advertising.

Third parties

We use a small set of processors to run the service: hosting (Vercel), database (Supabase), email delivery for magic links (Resend), and Google for optional sign-in. Market prices are fetched from public exchange APIs without sending them your personal data.

Retention and deletion

Bot and trade history is kept while your account exists so your records stay intact. You can delete your account at any time from Settings → Danger zone: your bots are paused and sign-in is disabled immediately, and remaining personal data is deleted within 30 days, except what we must keep for legal or security reasons. You can also email support@metavulus.id from your registered address.

Contact

Privacy questions: support@metavulus.id. Metavulus AI Bots (metavulus.ai) is operated by the same Metavulus team as metavulus.id, and support for both products is handled at that address.