Privacy Policy

1. Who we are

Whale Together operates a software platform that relays trading signals from services such as TradingView to cryptocurrency exchange accounts that you connect using your own API keys. We are the data controller for the personal data described in this policy. For any privacy question, contact us at [email protected].

2. Data we collect

Account data

Your email address, full name (optional), password (stored only as a secure hash), and your TradingView username where you provide it.

Exchange API credentials

When you connect an exchange, you provide API keys. These are encrypted at rest and are used only to read balances and place the orders your signals trigger. We ask you to create keys with trading enabled and withdrawals disabled. We never take custody of your funds and cannot move assets out of your exchange account.

Usage and technical data

Signals received, orders attempted, bot configuration, logs, timestamps, IP address, browser and device information, and similar diagnostic data needed to operate and secure the service.

Payment data

When paid plans are available, payments are handled by a third-party payment processor. We do not store your full card details; we receive only the information needed to manage your subscription.

Communications

Messages you send us through the contact form or by email, including your email address and message content.

3. How we use your data

• To provide the service: receiving your signals and placing orders on your connected exchange accounts.
• To create and secure your account, including two-factor authentication and login protection.
• To send transactional email (verification, password reset, signal failure alerts, and service notices).
• To operate, monitor, debug, and improve the platform.
• To process payments and manage subscriptions where applicable.
• To comply with legal obligations and enforce our terms.

4. Legal bases (EEA/UK users)

Where the GDPR applies, we process your data on the basis of: performance of a contract (to deliver the service you signed up for), legitimate interests (security, fraud prevention, product improvement), consent (where you give it, e.g. optional communications), and legal obligation (where we are required to retain or disclose data).

5. How we share data

We do not sell your personal data. We share it only as needed to run the service:

• Cryptocurrency exchanges you connect, via their APIs, to place your orders.
• Infrastructure and email providers that host our servers and deliver our email, acting on our instructions.
• Payment processor for subscription billing, where applicable.
• Authorities where we are legally required to disclose data.

6. Data retention

We keep your data for as long as your account is active and as needed to provide the service. When you delete your account, we remove or anonymise your personal data, except where we must retain certain records to meet legal, accounting, or security obligations.

7. Security

We use encryption for sensitive data such as exchange API keys, enforce hashed passwords, offer two-factor authentication, and apply access controls and monitoring. No system is perfectly secure, but we work to protect your data using appropriate technical and organisational measures.

8. Your rights

Depending on your location, you may have the right to access, correct, delete, restrict, or object to the processing of your personal data, and to data portability. You can manage much of your data in your account settings, or contact us to exercise these rights. If you are in the EEA or UK, you also have the right to lodge a complaint with your local data protection authority.

9. International transfers

Our infrastructure and some providers may process data in countries outside your own. Where required, we rely on appropriate safeguards for such transfers.

10. Cookies

We use strictly necessary cookies and local storage to keep you signed in and to operate the service. We do not use them to build advertising profiles.

11. Children

The service is intended for adults. It is not directed to anyone under 18, and we do not knowingly collect data from minors.

12. Changes to this policy

We may update this policy from time to time. We will change the "last updated" date above and, for material changes, take reasonable steps to notify you.

13. Contact

Questions about this policy or your data? Email us at [email protected].