1. Information We Collect
We collect information necessary to provide and secure our trade replication service. This includes:
- Account Credentials: Email address and username when registering.
- Exchange API Keys: API keys, secret keys, and passphrases for connected exchanges (e.g. Binance, Bybit, OKX).
- Trade Logs: Metadata of replicated trades (timestamps, order sizes, symbol, execution delay, and slippage) for position reconciliation and performance analytics.
2. How We Use Your Information
Your data is strictly used for the execution of the services you configure:
- Trade Replication: Executing duplicate orders on target subaccounts/exchanges.
- Position Reconciliation: Performing automatic safety checks (every 100ms) to ensure follower positions match master accounts.
- Platform Troubleshooting: Debugging rate limit issues, connection dropouts, or execution errors.
3. Data Protection and Encryption
We implement military-grade security to ensure your exchange API credentials remain private. All API keys and secrets are encrypted at rest using AES-256-GCM and are decrypted only in memory within our isolated execution environment. We recommend that you always keep withdrawal permissions disabled on all API keys you connect to Decoded.
4. Data Sharing and Third Parties
Decoded does not sell, lease, or rent your personal information or trading history to any third parties. Your exchange credentials and trade requests are sent directly to the respective exchange APIs (e.g., Binance, Bybit) via encrypted HTTPS/Websocket connections.
5. Cookies and Tracking
We use functional cookies and local storage tokens solely to maintain your logged-in session and store UI settings (such as dark mode preferences). We do not run third-party tracking scripts or advertising trackers on our terminal dashboard.
6. Your Rights
You have the right to view, download, or delete your account data at any time. Removing an exchange connection from your dashboard immediately wipes all stored API key data from our servers. If you choose to close your Decoded account, all associated user data will be permanently purged from our database within 24 hours.