Privacy Policy

Last Updated: May 2026

At CodeOnSys, we value your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you use our website, services, and AI trading bots.

1. Information We Collect

We collect information you provide directly to us when creating an account, subscribing to packages, or configuring your cTrader API keys. This includes your username, email address, API access tokens, and bot trading settings. We also automatically collect server logs, IP addresses, and session details for security and debugging purposes.

2. How We Use Your Information

Your information is used solely to provide and improve our services, execute automated trades through your authorized API keys, deliver performance reports, and maintain account security. We do not sell or share your personal data, API credentials, or trading activity with third parties.

3. Data Security & API Safety

Your API credentials and cTrader access tokens are encrypted and stored securely using industry-standard protocols. We strongly recommend configuring restricted API permissions on your cTrader portal to allow only necessary trading actions (avoiding deposit/withdrawal permissions).

4. Cookies & Tracking

We use cookies and similar tracking technologies (such as Google Analytics) to analyze traffic, remember your preferences, and maintain session authorization. You can control cookies through your browser settings, though disabling them may affect website functionality.

5. Changes to This Policy

We reserve the right to update this Privacy Policy at any time. Any changes will be posted on this page with an updated 'Last Updated' date. Continued use of our platform constitutes your acceptance of the updated terms.

Secure & Encrypted API

We use AES-256 standard encryption algorithms to secure your stored API credentials. Your keys never leave our secure server backend and are used solely to send trading signals to Spotware / cTrader. We will never ask for keys with withdrawal permissions.