Crypto Agent Ltd ("we", "us", "our") is committed to protecting your privacy. This policy explains what personal data we collect, why we collect it, how we store and protect it, and what rights you have.
Company details: Crypto Agent Ltd, registered in England & Wales (Company No. 17174088). Data protection contact: privacy@crypto-agent.co.uk.
This policy covers the crypto-agent.co.uk website and the CryptoAgent desktop application. CryptoAgent is a locally-installed application, not a cloud service. This distinction is important to how your data is handled, and we explain it in detail below.
1. What Data We Collect
1.1 Account Data
When you create a CryptoAgent account, we collect: email address (used for authentication, subscription management, and essential service communications), display name (shown on the optional leaderboard if you opt in, and within your account dashboard), and password (stored as a salted cryptographic hash; we never store or have access to your plaintext password). This data is stored on our licensing server.
1.2 Subscription and Licensing Data
When you subscribe, we store: subscription tier (Edge or Alpha) and billing cycle (monthly or annual), licence key and activation status, add-on status (active agent and modifier add-ons), and a machine fingerprint hash (a one-way hash used to link your licence to your device; we cannot derive your hardware details from this hash).
1.3 Payment Data
Payments are processed by Stripe. We do not store, process, or have access to your payment card details at any time. Stripe's privacy policy governs how they handle this data: stripe.com/privacy.
1.4 Leaderboard Data (Opt-In Only)
If you choose to participate in the CryptoAgent leaderboard, we collect anonymised performance metrics (percentage returns only, not absolute values or trade details) and your chosen display name. Leaderboard participation is entirely optional. You can opt in or out at any time from your account settings.
1.5 Website Analytics
We may use analytics tools on the crypto-agent.co.uk website to understand how visitors use the site. Any analytics data collected is anonymised and cannot identify you personally. See our Cookie Policy for details.
1.6 Marketing and Waitlist Data
If you sign up to our waitlist or subscribe to marketing communications, we collect your email address. You can unsubscribe at any time using the link in every email, or by contacting us at privacy@crypto-agent.co.uk.
1.7 Support Communications
If you contact us via email or the contact form, we retain the contents of your correspondence for as long as necessary to resolve your query and for a reasonable period afterwards for quality and training purposes.
2. What Data We Do NOT Collect
CryptoAgent is a locally-installed application. The following data never leaves your device and is never transmitted to our servers:
- Exchange API keys: encrypted with AES-256 and stored only on your local machine.
- Trading data: your trades, positions, order history, and portfolio balances remain on your device.
- Market data: price data and order book snapshots are received directly by your device from exchange APIs.
- Tax records: all tax calculations, cost basis records, and HMRC-formatted reports are generated and stored locally on your device.
- Signal and strategy data: your agent's signal stream outputs, confidence scores, weight configurations, and strategy settings remain on your device.
3. Lawful Basis for Processing
Under the UK General Data Protection Regulation (UK GDPR), we process your personal data on the following lawful bases: contract performance for account, subscription and payment data; legitimate interest for machine fingerprint hash, analytics and support; consent for leaderboard and marketing communications.
4. How We Store and Protect Your Data
Licensing Server: hosted on UK/EEA infrastructure with HTTPS/TLS encryption, salted password hashes, SSH key-only authentication, regular patching, encrypted backups.
Your Local Device: Exchange API keys, trading data, tax records, and strategy settings are stored on your own device. We provide AES-256 encryption for API key storage.
Stripe: Payment data handled by Stripe (PCI DSS Level 1).
5. Who We Share Your Data With
Stripe (payment processing), email service provider (transactional + marketing emails with consent). We do not sell, rent, or trade your personal data.
6. International Data Transfers
We aim to keep all personal data within the UK and EEA. Where third-party processors operate globally (e.g. Stripe), we rely on Standard Contractual Clauses approved by the ICO.
7. How Long We Keep Your Data
Account data: duration plus 6 months. Subscription/licensing records: duration plus 6 years. Leaderboard data: until opt-out. Marketing consent: until unsubscribe. Support correspondence: 2 years from resolution.
8. Your Rights
Under UK GDPR you have: right of access, rectification, erasure, restriction of processing, data portability, objection, and withdrawal of consent. We respond within one month.
9. Cookies
Our website uses cookies. See our Cookie Policy for details. The CryptoAgent desktop application does not use browser cookies.
10. Children
CryptoAgent is not intended for use by anyone under the age of 18.
11. Changes to This Policy
Material changes notified by email. 'Last updated' date revised.
12. Complaints
Right to lodge a complaint with the Information Commissioner's Office (ICO): ico.org.uk, 0303 123 1113. Please contact us first at privacy@crypto-agent.co.uk.
13. Contact
privacy@crypto-agent.co.uk · info@crypto-agent.co.uk
Crypto Agent Ltd, Company No. 17174088, registered in England & Wales.