This page explains the rights you have over your personal data under the EU General Data Protection Regulation (GDPR) and the equivalent UK GDPR. It also tells you how to use those rights with TalixTrade.
TalixTrade is software for building and running trading bots (the bot builder, Smart Trade, signals, backtesting, paper mode, AI Builder/Risk Manager/Optimizer/Assistant, and Auto-Hedge). We are not an exchange, bank, broker, custodian, or financial advisor. Your funds always stay on your own exchange account (Binance, Bybit, OKX). We connect only through an API key that has withdrawal permission disabled, so we can never move or hold your money.
For full detail on what data we collect and why, please read our Privacy Policy.
This is a draft for later review by legal counsel. It is not yet legally vetted.
Who this applies to
These rights apply to you if you are located in the European Union, the European Economic Area, or the United Kingdom. People in other regions may have similar rights under their local laws, and we are happy to help where we reasonably can.
Your rights
Under GDPR you have the following rights. We have noted the relevant Article so you can read the law yourself.
- Right of access (Art. 15). You can ask whether we hold personal data about you and request a copy of it, along with information about how and why we use it.
- Right to rectification (Art. 16). You can ask us to correct data that is wrong, or to complete data that is incomplete.
- Right to erasure (Art. 17). You can ask us to delete your personal data — for example, when it is no longer needed or you withdraw consent. This is sometimes called the "right to be forgotten." Some data may need to be kept where the law requires it (for example, certain billing records).
- Right to restrict processing (Art. 18). You can ask us to pause our use of your data in certain situations — for example, while we check the accuracy of data you have challenged.
- Right to data portability (Art. 20). You can ask for a copy of the data you gave us in a structured, commonly used, machine-readable format, and you can ask us to send it to another provider where this is technically possible.
- Right to object (Art. 21). You can object to certain processing, including any processing based on our legitimate interests, and to use of your data for direct marketing.
- Right to withdraw consent. Where we rely on your consent, you can withdraw it at any time. Withdrawing consent does not affect anything we did lawfully before you withdrew it.
You also have the right to complain to a data protection authority — see Right to complain below.
How to exercise your rights
There are two simple ways to make a request:
- Email us at [email protected]. Please tell us which right you want to use and include enough detail for us to find your account.
- Use in-app Settings. Some requests can be started directly from your account settings (see Self-service below).
We will respond within 30 days of receiving your request. If your request is unusually complex, the law allows us to extend this by up to two further months — if that happens, we will tell you within the first 30 days and explain why.
Self-service where available
Where we can, we let you handle things yourself without waiting on us:
- Data export. You can export your data (such as your bot configurations and account information) directly from in-app Settings, which covers most access and portability requests.
- Correction. You can edit much of your profile and account information yourself at any time.
- Account deletion. You can start deletion of your account from Settings.
If the self-service tools do not cover what you need, email [email protected] and we will handle it.
Identity verification
To protect your account and your data, we need to be reasonably sure that a request really comes from you. We will usually verify your identity using the email address tied to your account. For sensitive requests we may ask for a little more information to confirm it is you. We only use this information to check identity, and we ask for no more than we need. This is a security measure that protects you, not a way to delay your request.
Please note: API keys and your exchange funds are never accessible to us in a way that would let us act on your exchange account. API keys are encrypted with AES-256-GCM, the encryption key is stored in a server environment variable kept separate from the database, and keys are never sent to your browser.
Cost
Using your rights is free. The only exception allowed by law is if a request is clearly unfounded or excessive — for example, repetitive requests. In that rare case we may charge a reasonable fee that reflects our costs, or decline the request, and we will explain why before doing either.
Right to complain
If you think we have not handled your personal data properly, please contact us first at [email protected] — we would like the chance to put things right.
You also have the right to complain to a supervisory authority:
- In Ukraine, where our operator is based, you may contact the Ukrainian Parliament Commissioner for Human Rights (Ombudsman), which oversees personal data protection.
- In the EU/EEA, you may contact the data protection authority in your own country or place of work.
- In the UK, you may contact the Information Commissioner's Office (ICO).
Contact
Our operator is Anton Shchur, an Individual Entrepreneur (FOP) registered in Ukraine (registry number 2011600000000040678), at Dnipro, Dnipropetrovsk Oblast, Ukraine.
For any privacy request or question, contact our privacy contact at:
Related pages: Privacy Policy · Terms of Service