Privacy Policy

1. Information We Collect

We collect only the information needed to operate the Service:

• Account information. Your email address and basic account details (such as your subscription plan and account preferences) when you sign up.
• Payment metadata. When you subscribe, we receive customer and payment metadata from Stripe — for example, your Stripe customer ID, the last four digits of your card, card brand, billing country, and the status of your subscription. We never see or store your full card number, CVC, or other sensitive card data; that information is collected and processed directly by Stripe.
• Wallet addresses. We store the public blockchain wallet address you connect so the Service can route signals and place trades through a revocable trading agent. Wallet addresses are public on-chain data. We never collect, request, or store your private keys, seed phrases, or recovery phrases.
• Usage and device data. Standard server logs and, where you consent, analytics data such as pages viewed, approximate location derived from IP, browser type, and timestamps. See our Cookie Policy.
• Support communications. Any information you provide when you contact us for support.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service, including generating trading signals and executing automated trades on the wallet you connect.
• Process subscriptions, billing, and payments, and prevent fraud and abuse.
• Respond to your requests, provide customer support, and send you service-related notices.
• Monitor, debug, and improve the performance, reliability, and security of the Service.
• Comply with legal obligations and enforce our terms.

3. Third Parties We Share With

We do not sell your personal information. We share data only with the service providers needed to run the Service:

• Stripe — our payment processor, which handles card data, billing, and subscription management. Stripe’s handling of your data is governed by its own privacy policy.
• SGA Central Auth (sgaAuth) — our identity provider, which manages sign-in and authentication across SGA services.
• Hyperliquid — the decentralized exchange where trades are executed against the wallet you connect. Order and position data necessarily flows through Hyperliquid to fulfil the Service.

We may also disclose information where required by law, to protect our rights, or in connection with a merger, acquisition, or sale of assets, in which case we will notify affected users.

4. Cookies and Analytics

We use an essential session cookie to keep you signed in and, only with your consent, optional analytics cookies to understand how the Service is used. You can manage your preferences at any time. For a full breakdown of the cookies we set, please read our Cookie Policy.

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. After you close your account, we delete or anonymize your personal data within a reasonable period, except where we must retain certain records (such as transaction and billing records) to comply with legal, tax, accounting, or regulatory obligations, or to resolve disputes and enforce our agreements.

6. Your Rights and Choices

Depending on where you live, you may have the right to access, correct, export, or delete the personal information we hold about you, and to object to or restrict certain processing. To exercise any of these rights, email us at crypto@sgatrader.com and we will respond within a reasonable timeframe. We may need to verify your identity before acting on a request.

7. Security

We use reasonable technical and organizational measures — including encryption in transit, access controls, and a non-custodial architecture in which we never hold your funds or private keys — to protect your information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. You are responsible for safeguarding your wallet, private keys, and login credentials.

8. Children’s Privacy

The Service is intended only for adults 18 years of age or older. We do not knowingly collect personal information from anyone under 18. If we learn that we have collected such information, we will delete it. If you believe a minor has provided us information, please contact us.

9. International Transfers

We and our service providers may process and store your information in countries other than the one in which you reside, including countries that may have different data-protection laws. Where required, we take steps to ensure your information receives an adequate level of protection when transferred internationally.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, notify you. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or how we handle your data, contact us at crypto@sgatrader.com.