Privacy Policy

Introduction

GPTrader ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform at gptrader.app.

By using the Service, you consent to the data practices described in this policy.

Information We Collect

We collect information that you provide directly to us and information collected automatically when you use our Service:

• Account information: name, email address, username, and password
• Payment information: processed and stored securely by Whop — we do not store payment card details
• Exchange API keys: encrypted and stored to enable agent functionality (we never use these to withdraw funds)
• Usage data: trading agent configurations, strategy parameters, backtest results
• Device and technical data: IP address, browser type, operating system, and access logs
• Communications: emails or support messages you send us

How We Use Your Information

We use the information we collect for the following purposes:

• To provide, maintain, and improve the Service
• To process transactions through our payment partner Whop
• To operate your autonomous AI trading agents on your behalf
• To send transactional and service-related communications
• To respond to your comments and questions
• To detect, prevent, and address fraud or security issues
• To comply with legal obligations
• To analyze usage and improve platform performance

Data Sharing and Disclosure

We do not sell your personal data. We may share your information with:

• Whop: as our payment and distribution partner, for subscription and billing management
• Cloud infrastructure providers: for secure hosting and data storage (data is encrypted in transit and at rest)
• AI model providers (OpenAI, Google, Anthropic, xAI): only market data and strategy prompts required to generate analysis — never your personal or financial details
• Law enforcement: when required by applicable law or court order
• Business transfers: in connection with a merger, acquisition, or sale of assets, with prior notice

Exchange API Keys — Special Handling

Your exchange API keys are treated as highly sensitive data. We apply the following protections:

• Keys are encrypted using industry-standard AES-256 encryption at rest
• Keys are transmitted exclusively over encrypted HTTPS connections
• Keys are used only to execute trade orders you configure — never for withdrawals
• You may delete your API keys from our platform at any time

Cookies and Tracking

We use cookies and similar tracking technologies to enhance your experience, analyze usage, and support authentication. You can control cookies through your browser settings.

We may use third-party analytics services (e.g., Google Analytics) to understand usage patterns. These services collect anonymized data in accordance with their own privacy policies.

Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete or anonymize your personal data within 30 days, except where retention is required by law.

Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet is 100% secure.

International Transfers

Your data may be processed in countries other than your own. By using the Service, you consent to the transfer of your information to countries that may have different data protection laws.

Children's Privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If we discover that we have inadvertently collected such data, we will delete it promptly.

Contact Us

If you have questions or concerns about this Privacy Policy, please contact us: