Privacy Policy

Last updated 6 July 2026

This policy explains what Strattice (the “Service”) collects, why, and how it is protected. We collect the minimum needed to run the Service.

What we collect

Account data — your email, optional name, and authentication credentials (or a Google account identifier if you sign in with Google).
Exchange API keys — the CoinDCX API key and secret you choose to link, stored encrypted at rest and never displayed back.
Trading and bot data — the strategies you configure and the trades, positions, and equity snapshots your bot produces, so the dashboard can show them.
Preferences — notification and display-currency settings, including a Telegram chat id if you add one.
Technical data — basic request metadata (such as IP address) used for security and rate limiting.

How we use it

To operate the Service: run your strategies, show your dashboard, send the notifications you enable, protect accounts from abuse, and provide support. We do not sell your personal data.

Security

Data is stored in Cloudflare D1. CoinDCX API keys are encrypted with AES-256-GCM and are never shown back to you or visible in any admin view. We recommend keys with withdrawals disabled so funds cannot leave your exchange account through Strattice. No system is perfectly secure, but we take reasonable measures to protect your data.

Third parties

We share data only as needed to run the Service, with providers including: CoinDCX (order execution, using your keys), public market-data providers, an email provider for transactional email, Google (only if you use Google sign-in), Telegram (only if you enable Telegram alerts), and our authentication provider. Each processes data under its own terms.

Sessions and cookies

We use a session cookie to keep you signed in. We do not use third-party advertising or tracking cookies.

Retention

We keep your data while your account is active. When you delete your account, associated data — including your encrypted API keys — is removed. Some records may be retained where required by law.

Your rights

You can access and update your information in the app, remove your API keys at any time, and request deletion of your account and data. To exercise these rights, or to raise a grievance under applicable data-protection law, contact us below.

Children

The Service is not directed to anyone under 18, and we do not knowingly collect their data.

Changes and contact

We may update this policy; the “last updated” date above reflects the latest version. Questions or requests can be sent to saranshbangad@gmail.com.