Privacy Policy

1. Information we collect

When you use Puqet, we collect:

• Account information — email, username, password (stored as a salted hash, never in plain text), name, country, and phone number, if provided.
• Identity verification (KYC) — if you go through account verification, the documents and details you submit for that purpose.
• Security data — your two-factor authentication secret (stored encrypted, not in plain text), session identifiers, and login history including IP address and approximate location (derived from IP, not GPS).
• Financial/activity data — your on-platform balance, transaction history, and subscription status (e.g. Trade Bot renewal dates).
• Communications — messages you send us, including through the Contact form.

2. Why we collect it

To create and secure your account, to verify identity where required before enabling certain features (like withdrawals), to deliver the features you use (including Trade Bot's notification emails, if you opt in), to respond to support requests, and to detect and prevent fraud or abuse.

3. Cookies & session data

Your login session is stored in an HttpOnly cookie your browser's scripts can't read directly, which we use solely to keep you signed in and to verify who's making a request. A small number of additional cookies (e.g. a referral code, if you arrived via a referral link) are used for that specific purpose only.

4. Third-party services we use

We share the minimum data each of these needs to do its job:

• Market data (Binance) — we fetch public market data to display prices and to generate Trade Bot's automated signals/digests/ alerts. We don't send your personal data to this source; it's a one-way, public data fetch.
• Email delivery (Mailtrap/SMTP) — used to send account emails (verification codes, password resets) and, if you opt in, Trade Bot notifications. Your email address is shared with this provider solely to deliver those messages.
• Google Sign-In — if you choose to sign up or log in with Google, we receive your verified email from Google to complete that flow.
• Analytics — we use standard web analytics to understand aggregate site usage.
• Embedded charts (TradingView) — some pages embed TradingView widgets, which may set their own cookies under TradingView's own privacy policy, separate from ours.

5. How we protect your data

Passwords are hashed, never stored in plain text. Two-factor authentication secrets are encrypted at rest. Session cookies are HttpOnly, Secure, and scoped with SameSite protections. Sensitive account and financial actions are rate-limited to slow down automated abuse. No system is perfectly secure, but these are the real, specific measures in place today, not a generic claim.

6. Your choices

You can turn Trade Bot's optional broadcast emails (daily digest and volatility alerts) on or off anytime from your notification feed — this doesn't affect renewal-reminder emails, which are account/billing-related and stay on. To request access to, correction of, or deletion of your personal data, contact us (below); we'll respond as required by applicable law.

7. Data retention

We retain account and transaction data for as long as your account is active and as needed to meet legal, accounting, or fraud-prevention obligations after that. [Placeholder — insert specific retention periods once decided.]

8. Children's privacy

Puqet is not directed at, and is not intended for use by, anyone under the age of 18.

9. Changes to this policy

We may update this policy as the platform changes. Continued use after an update means you accept the revised policy.

10. Contact

Questions about this policy, or a data access/deletion request? Reach us at [email protected] or via the Contact page.