Privacy Policy

This Privacy Policy explains how BlockWealth (“BlockWealth”, “we”, “us”) processes personal data when you visit our website, create an investor account, use the trading automation Service, contact us, or otherwise interact with us.

We serve users in many countries. Depending on where you live, you may have rights under laws such as the UK GDPR, EU GDPR, or other local privacy statutes. This Policy is intended to provide clear notice for an international audience. Where local law grants you stronger rights, we will honor those rights.

Related documents: Terms of Service.

1. Who is responsible for your data

BlockWealth is the controller of personal data collected through the Service, unless stated otherwise for a specific processing activity. Contact: support@blockwealth.biz.

2. Personal data we collect

2.1 Data you provide

• Account data: name, email address, password (stored as a secure hash), and terms/privacy acceptance timestamp.
• Exchange credentials: Binance API key and secret you submit (secrets are encrypted at rest).
• Billing data: selected plan, payment method details you submit (such as network/address references and transaction hashes), and subscription status.
• Support communications: contact-form content and related correspondence.
• Optional integrations: if you connect a social account (for example X/Twitter) for trade posting, tokens and profile identifiers needed to operate that feature.

2.2 Data generated by use of the Service

• Pair enablement choices and BTC allocations
• Bot state, cycle logs, orders metadata, balances/history snapshots, notifications, and backtest records associated with your account
• Authentication events such as OTP verification and session activity
• Technical logs needed for security, debugging, and service reliability

2.3 Data collected automatically

• IP address, browser/user-agent, device/app approximate type, and timestamps
• Pages visited on our site and basic diagnostic/error information
• Cookies or similar technologies required for sessions, CSRF protection, and preferences

We do not intentionally collect special-category data (such as health or biometric data) through the Service. Please do not submit such information in support messages.

3. Purposes and legal bases

We process personal data for the following purposes:

• Provide the Service (account creation, authentication, pair configuration, automated trading orchestration, dashboards) — contract performance.
• Billing and plan entitlements — contract performance and legitimate interests in preventing fraud.
• Security and abuse prevention (OTP, suspension, intrusion detection) — legitimate interests and legal obligations where applicable.
• Support and communications — contract performance and/or legitimate interests.
• Legal compliance (responding to lawful requests, enforcing terms) — legal obligation and legitimate interests.
• Service improvement (aggregated diagnostics, reliability) — legitimate interests.

Where we rely on consent (for example optional marketing or certain cookies beyond essentials, if introduced), you may withdraw consent at any time without affecting prior lawful processing.

4. How trading credentials are handled

BlockWealth is non-custodial: your funds remain on Binance. API credentials are used only to operate the trading features you enable. Secrets are encrypted in our database. You should restrict key permissions (ideally no withdrawals), use exchange security controls, and revoke keys when no longer needed. We never sell your API credentials.

5. Sharing of personal data

We may share personal data with:

• Infrastructure processors such as hosting, database, email delivery, and monitoring providers that process data on our instructions.
• Exchanges and networks you choose to use (for example Binance), when your credentials and trading instructions cause data to be sent to those services.
• Optional social platforms if you connect them for posting features.
• Professional advisers (legal, accounting) under confidentiality obligations when needed.
• Authorities when required by law or to protect rights, safety, and security.
• Business transfers in connection with a merger, acquisition, or asset sale, subject to appropriate protections.

We do not sell your personal data.

6. International transfers

Our Service infrastructure and subprocessors may be located in different countries from your place of residence (including the United Kingdom, European Economic Area, United States, Asia, or elsewhere). Where we transfer personal data internationally, we take steps designed to provide an appropriate level of protection, such as contractual safeguards with processors and careful vendor selection.

7. Retention

We retain personal data only as long as reasonably necessary for the purposes above, including:

• Account and trading records while your account is active and for a period afterward for security, dispute, tax, and legal reasons
• Support messages for as long as needed to resolve inquiries and maintain service quality records
• Security logs for a limited operational period unless needed longer for investigations

When data is no longer required, we delete or irreversibly anonymize it, except where retention is required by law.

8. Security

We use administrative, technical, and organizational measures appropriate to the risk, including encrypted storage of API secrets, hashed passwords, separated admin/investor authentication, transport encryption (HTTPS), and access controls. No method of transmission or storage is 100% secure; you share residual risk inherent to internet services and exchange API integrations.

9. Your rights

Depending on your location, you may have rights to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion (subject to legal/retention exceptions)
• Object to or restrict certain processing
• Data portability for data you provided to us in a commonly used format
• Withdraw consent where processing is consent-based
• Lodge a complaint with a supervisory authority in your country or region

To exercise rights, email support@blockwealth.biz. We may need to verify your identity before fulfilling requests. You can also reduce processing immediately by disabling pairs, removing API keys, and disconnecting optional integrations.

10. Cookies and similar technologies

We use essential cookies and similar technologies required for authentication, session integrity, CSRF protection, and core site operation. If we introduce non-essential analytics or marketing cookies, we will provide appropriate notice and choices where required by law.

11. Children

The Service is not directed to individuals under 18 (or higher age of majority where applicable). We do not knowingly collect personal data from children. If you believe a child has provided data, contact us so we can delete it.

12. Automated decision-making

The Service uses automated rules to place and manage trades based on parameters you and administrators configure. These systems execute trading logic; they are not used to determine legal effects such as creditworthiness. You control whether pairs are enabled and can disable automation at any time.

13. Changes to this Policy

We may update this Privacy Policy from time to time. The “Last updated” date will change when we do. For material changes, we may provide additional notice (for example in-product or by email). Continued use of the Service after an update constitutes acknowledgment of the revised Policy where permitted by law.

14. Contact

Privacy questions or requests: support@blockwealth.biz or our contact page.