Privacy Policy — Algohive

Last updated: October 30, 2026 Effective date: October 30, 2026

This Privacy Policy describes how the Algohive team ("we", "us", "our") collects, uses, stores, and protects information in connection with the Algohive software, the website at algohive.io, our Telegram bot, and any related services (collectively, the "Service" or "Platform").

The Service is offered on a global basis, except where restricted by applicable law or by our own eligibility rules (see the Terms of Use). The Service is intended only for persons 18 years of age or older.

By creating an account or using the Service, you acknowledge that you have read and understood this Privacy Policy.

1. Our Approach: Minimum Data, Maximum Privacy

Algohive is built on a simple principle: collect as little data as possible, only what is strictly necessary to provide the Service.

We do not conduct KYC (Know Your Customer) identity verification. We do not request your full name, your address, your phone number, your date of birth, your nationality, your passport or ID number, your email address, or any document that identifies you as a person.

We do not request, store, or process:

• your private keys for crypto wallets;
• your seed phrase;
• your password for the third-party platform (Upscale, Binance, Bybit, OKX, etc.);
• your email address — registration and all Service communications happen through your nickname and Telegram chat ID.

We only ever handle an API key, and only one that you have created with trade-only permissions on the underlying platform.

2. What Data We Collect

2.1 Account data (required)

• Nickname — your public identifier on the Platform.
• Password — stored as a salted hash (bcrypt or argon2). We never store passwords in plain text and cannot recover them if lost.
• Recovery Key — a one-time key generated at registration, used to restore access if you forget your password. Store it safely; we cannot regenerate it for you.

2.2 Account data (optional)

• Telegram Chat ID — numeric identifier used to send you trade notifications, subscription reminders, and security alerts via Telegram. Providing it is optional, but without it you will not receive any Service notifications outside the Platform UI.

2.3 API keys

• API key and API secret for each third-party platform you connect (Upscale, Binance, Bybit, OKX).
• These keys are encrypted with AES-256-GCM before storage.
• They are used only to send trade orders to the connected platform on your behalf.
• They are never shared with third parties.

2.4 Trading data

• Records of trades opened, modified, or closed by bots on your behalf (entry price, exit price, side, size, P&L).
• These records are stored to display your trading history in the dashboard and to compute aggregate statistics (win rate, profit factor).

2.5 Technical data

• IP address at sign-in.
• Browser type, operating system, device type.
• Session identifier, login timestamp.
• Aggregated, anonymized usage analytics (which features are used most often, where users drop off in the funnel).

2.6 Telegram data (if you connect Telegram)

• Your Telegram user ID (numeric).
• Your Telegram display name (as shown in your public profile).
• We use this to send you trade notifications, subscription reminders, and security alerts.
• We do not store the contents of private conversations you have with our support team beyond what is necessary for ticket resolution.

2.7 Payment data

• The payment method you selected (bank transfer, card, or cryptocurrency).
• For card or bank transfer payments: the transaction is processed by a third-party certified payment processor. Algohive does not receive or store your card number, CVV, or bank account details — the processor shares with us only the payment status (paid / pending / failed) and the transaction reference.
• For USDT (TRC-20) payments: we record the sender wallet address and the transaction hash.
• We do not see, store, or process your full card details at any point.

3. How We Use Your Data

We use the data we collect to:

1. Provide the Service — create and maintain your account, authenticate your sign-in, send trade orders on your behalf.
2. Operate the Service — connect to third-party platforms, fetch market data, execute bot logic.
3. Display your activity — show your trade history, P&L, and bot performance in the dashboard.
4. Send notifications — trade open/close alerts, TP/SL hits, subscription reminders, security alerts (via Telegram only).
5. Provide support — investigate bug reports, resolve account issues.
6. Maintain security — detect unauthorized access, prevent fraud, block abusive users.
7. Improve the Service — analyze aggregated, anonymized usage patterns to prioritize product changes.
8. Comply with legal obligations — retain limited records as required by applicable law.

We do not:

• sell your personal data to third parties;
• share your trading history with third parties, except where required by law;
• use your data for cross-platform advertising;
• profile you for purposes unrelated to the Service;
• send marketing emails (we have no email address on file for you).

4. Lawful Basis for Processing

Where applicable (for example, under GDPR), we process your personal data on the following lawful bases:

1. Performance of a contract — processing necessary to provide the Service you signed up for.
2. Legitimate interests — securing, monitoring, and improving the Service.
3. Legal compliance — fulfilling record-keeping obligations under applicable law.

5. Cookies and Storage

The Service uses cookies and browser storage (localStorage, sessionStorage) for:

• session management (keeping you signed in);
• remembering your UI preferences (theme, language);
• measuring product usage with self-hosted analytics.

We do not use third-party advertising cookies or tracking pixels.

You can manage cookies in your browser settings. Disabling essential cookies may affect the functionality of the Service (for example, you may not be able to stay signed in).

6. Data Sharing

We do not sell or rent your personal data. We share data only with the following categories of recipients, where strictly necessary:

6.1 Third-party platforms you connect

When you connect an API key from Upscale, Binance, Bybit, OKX, or another platform, we send trade orders to that platform on your behalf. The data we send includes the trading pair, side, size, and price — but not your Algohive password, your other API keys, or any other account information.

6.2 Hosting and infrastructure providers

The Service is hosted on cloud infrastructure (such as a dedicated VPS provider) and uses a managed database (such as a managed PostgreSQL provider). These providers process limited data on our behalf under standard data-processing agreements.

6.3 Payment processor

When you pay for a subscription by card or bank transfer, the transaction is handled by a certified third-party payment processor. The processor receives your card or bank details directly from you — Algohive never sees, stores, or transmits your full card number, CVV, or bank account credentials. We receive from the processor only the payment status and a transaction reference.

6.4 Legal disclosures

We may disclose data where required by law, by a court order, or by a competent government authority. We will only disclose the minimum data necessary to comply with the request.

7. International Data Transfers

Because the Service is offered globally and our infrastructure may span multiple countries, your data may be processed in a jurisdiction other than your country of residence. Where applicable, we apply reasonable safeguards (such as standard contractual clauses) to protect data transferred across borders.

8. Data Retention

We retain your data for as long as your account is active. After account termination:

• Account credentials, API keys, and bot configurations — deleted within 30 days.
• Trading history — anonymized and retained for up to 12 months for aggregate statistics, then deleted.
• Payment records (transaction references and, for USDT payments, sender wallet addresses and transaction hashes) — retained for up to 7 years where required by applicable AML/tax law.
• Server logs — retained for 90 days for security and troubleshooting, then deleted.

If you would like your data deleted sooner, contact us via the Telegram support channel.

9. Security

We implement reasonable technical and organizational measures to protect your data, including:

• Encryption in transit (TLS 1.2+) for all connections to the Service.
• Encryption at rest for API keys (AES-256-GCM) and database backups.
• Access controls — only authorized team members can access production data, and only on a need-to-know basis.
• Audit logs for sensitive operations (sign-in, API key creation, subscription payments).
• Regular backups of the database, stored in a separate region.
• Incident response process — security incidents are investigated and affected users are notified without undue delay.

No method of storage or transmission is fully secure. We cannot guarantee absolute security, but we are committed to promptly investigating and disclosing any material security breach.

10. Your Rights

Depending on your country of residence, you may have the following rights over your personal data:

1. Access — request a copy of the personal data we hold about you.
2. Rectification — request correction of inaccurate data.
3. Erasure — request deletion of your data ("right to be forgotten"), subject to legal retention requirements.
4. Restriction — request that we limit the processing of your data.
5. Objection — object to processing based on legitimate interests.
6. Portability — receive your data in a structured, machine-readable format.

To exercise these rights, contact us via the Telegram support channel. We may require verification of your identity before responding to a request. We aim to respond within 30 days.

11. Children

The Service is intended only for persons 18 years of age or older. We do not knowingly collect data from minors. If we become aware that a person under 18 is using the Service, we will suspend or terminate their account.

12. No KYC, No Biometric Data

We do not conduct Know Your Customer (KYC) verification. We do not collect:

• your full name, surname, or patronymic;
• your date or place of birth;
• your nationality or country of residence (we ask only for eligibility confirmation, not documentary proof);
• your passport, ID card, driver's license, or any government-issued document;
• your selfie, biometric data, or video verification;
• your email address.

If we are required by law to collect any of the above, we will notify you in advance and process such data under a separate, explicit consent.

13. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version becomes effective on the date it is posted on the Platform. If we make material changes that affect your rights, we will notify you in the Service or via Telegram before the changes take effect.

Continued use of the Service after the effective date of an updated Privacy Policy constitutes acceptance of the revised version.

14. Contact

For privacy-related questions or requests to access or delete your data, contact us via the official Telegram support channel indicated on the Platform. We do not maintain a dedicated privacy email address at this time.

By creating an account and using Algohive, you confirm that you have read and understood this Privacy Policy.