Privacy Policy — AI Crypstock Pro

Last updated: October 2026
Effective date: Upon first launch of the app

1. Information We Collect

• Email address — Used solely for account identification, login authentication (admin/beta tester accounts), and support communications.
• Device identifiers — A random device ID is generated locally and stored on your device to bind your subscription to your device (fraud prevention). This ID is not linked to any personally identifiable Android ID or IMEI.
• Subscription status — Managed by Google Play Billing. We receive only the status (active/expired/trial) — we never see your payment method or card details.
• Exchange API credentials (OPTIONAL — ASI-Bot only) — If you voluntarily enable the ASI-Bot auto-trading feature, you provide your own exchange API Key and Secret (Binance / Bybit / OKX / Bitget). These are stored ONLY in AES-256-GCM envelope-encrypted form on our backend (the same standard used by AWS Encryption SDK and Google Tink). Keys are decrypted in-memory only at the moment of order submission and are never transmitted to any other system. The App actively REJECTS any API key that has Withdrawal permission enabled.
• Trade activity records (ASI-Bot only) — Orders you execute through the App (symbol, side, entry, stop-loss, take-profit, PnL) are stored to power your personal history, PnL summary, and the anonymous Top-10 live leaderboard (identified only by an auto-generated 3-letter handle — never your name or email).
• Anonymous usage analytics — App version, crash reports (aggregated).

2. Information We Do NOT Collect

• ❌ We do NOT collect your name, phone number, physical address, or biometric data.
• ❌ We do NOT have access to withdraw your funds. The App is strictly non-custodial: your assets remain 100% in your own exchange account at all times.
• ❌ We do NOT store exchange credentials in plaintext, and we refuse keys with Withdrawal permission.
• ❌ We do NOT track your location.
• ❌ We do NOT sell, rent, or share your personal data with third-party advertisers.

3. How We Use Your Data

• Verify your subscription status and device binding.
• Deliver AI-generated market analysis and news translation to your logged language.
• Execute trade orders on your connected exchange account ONLY when you explicitly confirm (Semi-Auto) or enable automation (Full-Auto), including protective Stop-Loss / Take-Profit bracket orders.
• Display your trade history, PnL summary, and anonymous leaderboard rank.
• Respond to your support requests.
• Improve app performance and fix bugs.

4. Third-Party Services

The App uses the following third-party services to deliver its core functionality:

• Google Play Billing — Subscription management, billing, and refund processing. Governed by Google Privacy Policy.
• Binance Public API — Live crypto price data. Read-only, no account required for price display.
• Binance / Bybit / OKX / Bitget Trade APIs — ONLY used if you connect your own API credentials for ASI-Bot. Your orders are routed directly to the exchange you chose; we recommend restricting your API key to our server's static IP address (shown in-app) per each exchange's security policy.
• Yahoo Finance API — Live stock, ETF, forex, gold, and commodity price data. Read-only, public data.
• Anthropic (Claude) — AI-generated market analysis. Prompts contain only technical indicators and public news headlines, no personal data.
• MongoDB Atlas — Encrypted cloud database for subscription records, encrypted credentials, and translated news cache.

5. Data Retention & Deletion

Your subscription record is retained while your subscription is active plus 90 days after cancellation for refund/dispute processing. ASI-Bot credentials and trade history can be deleted instantly by you via the Delete button inside the ASI-Bot page — deletion is irreversible. You may also request full deletion of all your account data by emailing cryptostockapps@gmail.com from the same email you registered with. Email-based deletion is processed within 30 days.

6. Data Security

• All data transmission uses HTTPS (TLS 1.2+).
• Exchange API credentials are encrypted at rest with AES-256-GCM envelope encryption.
• Passwords / unlock codes are hashed with bcrypt.
• Subscription verification is signed by Google Play server-side receipt validation.
• The backend runs on encrypted containers with restricted access and a static egress IP suitable for exchange IP-whitelisting.

7. Children's Privacy

The App is intended for users 18 years or older due to the financial nature of the content. We do not knowingly collect data from users under 18. Parents who believe their child has provided data should contact us for removal.

8. Financial Disclaimer

The App provides educational and reference information only. It is NOT financial, tax, or legal advice. The ASI-Bot feature is an automation tool that executes YOUR configured parameters on YOUR exchange account — it does not constitute portfolio management or investment advice. All buy/sell/long/short decisions and resulting profits or losses are solely the user's responsibility. See the in-app Disclaimer and ASI-Bot Terms for full terms.

9. Your Rights (GDPR / CCPA)

Depending on your jurisdiction, you may have the right to:

• Access your data (request a copy)
• Correct inaccurate data
• Delete your data ("right to be forgotten")
• Object to processing
• Data portability (export in machine-readable format)

Exercise these rights by emailing cryptostockapps@gmail.com.

10. Changes to This Policy

We may update this policy periodically. Material changes will be announced in-app and via email. Continued use of the App after changes constitutes acceptance of the updated policy.

11. Contact

© 2026 AI Crypstock Pro. All rights reserved.