Who We Are and What This Policy Covers

Argos TraderBot ('Argos', 'we', 'us') operates two properties: this website (argostraderbot.com), which presents the product and receives trial and contact requests, and the Argos TraderBot platform (app.argostraderbot.com and api.argostraderbot.com), the automation service that runs Binance trading strategies for its users.

This policy explains which personal data we collect through those channels, why we collect it, with whom it is shared, how we protect it and which rights you have under Brazil's General Data Protection Law (LGPD, Law No. 13,709/2018).

Argos TraderBot is the controller of this data. For any privacy matter, write to [email protected].

Data We Collect

We collect only the data described below, through the forms and services you use:

• Trial request form (website): your name, e-mail address, which exchange you use, your trading volume range, an optional free-text description of what you want to automate, and your IP address. Submissions are stored in our website database.
• Contact form (website): your name, e-mail address, an optional phone number and your message. The message is sent to us by e-mail and is not stored in a database.
• Platform account (app.argostraderbot.com): your name, e-mail address, phone number and password (stored only as a bcrypt hash). If you connect Argos to Binance, we store the API keys you register — kept encrypted and never used for withdrawals — plus your notification settings (Telegram chat ID and/or push token) and, if you configure them, your own SMTP e-mail settings, also kept encrypted.
• In-app feedback: the message you send, the page you sent it from and your browser user agent, linked to your account.
• Plan upgrade requests: your e-mail address, the plan you are interested in and an optional note.
• Technical records: IP addresses and request metadata in security and audit logs (kept for 90 days), application error logs, and session records of website administrators (IP address and browser user agent).

How We Use Your Data

• Create and operate your platform account and run the monitors and automations you configure on your Binance account;
• Respond to contact messages, feedback and support requests;
• Evaluate and follow up on trial requests and plan upgrade requests;
• Deliver the operational notifications you configured, by e-mail, Telegram, phone/SMS or mobile push;
• Keep the service secure and prevent abuse: rate limiting, bot protection on public forms and audit records.

Legal Bases (LGPD Art. 7)

We process personal data on the following legal bases:

• Performance of contract (art. 7, V): creating and operating your account, running your automations and delivering the notifications you configured.
• Legitimate interest (art. 7, IX): keeping the service secure, preventing fraud and abuse, keeping audit records and improving the product.
• Consent (art. 7, I): the third-party analytics and marketing cookies described in the next section and any communication you explicitly opt into.

Where consent is the basis, you may withdraw it at any time without affecting processing already carried out.

Cookies and Tracking

The website and platform use the following cookies and similar technologies:

• Essential first-party cookies: a session cookie (secure, encrypted, SameSite=Strict) and a CSRF protection cookie, required for forms and login to work, plus a language preference cookie.
• Google reCAPTCHA v3: loaded on public forms to tell humans and bots apart.
• Google Analytics 4 and Microsoft Clarity: usage and interaction analytics loaded on the marketing website.
• jsDelivr CDN: delivers the website's static front-end assets (Bootstrap).
• YouTube: blog posts may embed videos via youtube-nocookie.com, which avoids YouTube tracking cookies.
• Cloudflare: website traffic passes through Cloudflare's proxy; its Web Analytics beacon may be active depending on our dashboard configuration.

There is currently no cookie-consent banner; this section describes the technologies actually in use today. A consent flow for non-essential analytics is planned.

Sharing and Subprocessors

We do not sell your personal data. We share it only with the providers required to run the service:

• Hostinger — hosts the marketing website and its database.
• CapRover — our deployment platform for the trading application, its database and its cache.
• Binance — receives the orders your automations execute, always on your own account.
• SendGrid / SMTP — sends transactional and notification e-mails.
• Telegram, Twilio and Expo — deliver notifications via Telegram messages, phone/SMS and mobile push, respectively, when you configure them.
• Sentry — monitors application errors and performance.
• Google and Microsoft — reCAPTCHA, Google Analytics and Clarity on the marketing website.
• Cloudflare and jsDelivr — traffic protection and static asset delivery.

We may also disclose personal data when required by law, court order or a competent authority.

International Transfers

Some of the providers listed above may process data outside Brazil. When that happens, we rely on the international transfer mechanisms permitted by the LGPD (art. 33) and keep shared data limited to what the service requires.

How Long We Keep Your Data

• Security and audit logs: 90 days.
• Contact form messages: kept in our e-mail inbox for as long as needed to handle them.
• Trial requests, account data, feedback and upgrade requests: kept while your account is active or as needed for the purposes described in this policy, then deleted or anonymized when legally required.

Specific retention periods per category are being finalized and will be published in this section.

How We Protect Your Data

• All traffic is encrypted with HTTPS/TLS;
• Passwords are stored only as bcrypt hashes, never in plain text;
• Binance API keys and SMTP credentials are stored encrypted (AES-GCM), and Argos never requests Binance withdrawal permission;
• The website's admin area is restricted to an allowlist of IP addresses;
• Public forms are rate-limited and protected by reCAPTCHA;
• Session cookies are secure, encrypted and SameSite=Strict.

No transmission or storage method is completely secure. If we become aware of an incident that may cause you relevant risk or damage, we will notify you as required by the LGPD.

Your Rights (LGPD Art. 18)

You may exercise the following rights, at any time and free of charge:

• confirmation that your personal data is being processed;
• access to your personal data;
• correction of incomplete, inaccurate or outdated data;
• anonymization, blocking or deletion of unnecessary or excessive data, or of data processed in noncompliance with the LGPD;
• portability of your data to another supplier of the same service;
• deletion of personal data processed on the basis of consent;
• information about the public and private entities with which your data has been shared;
• information about the possibility of not providing consent and the consequences of refusing it;
• revocation of consent.

To exercise any of these rights, write to [email protected]. We may ask you to verify your identity before responding.

Children's Data

The service is intended for adult traders. We do not knowingly collect personal data from children; if we learn that we have, we will delete it.

Changes to This Policy

We may update this policy as the service evolves. The "Last updated" date at the top of this page shows the current version, and material changes will be highlighted on this page.