Privacy Policy

1. Information We Collect

We collect information you provide directly to us, including:

• Account information: Name, email address, username, and password when you create an account.
• Exchange API keys: Read-only API keys that allow us to fetch your portfolio data. We never request withdrawal or trading permissions.
• Profile information: Optional details such as your Telegram username, TradingView username, and country.
• Communication data: Messages you send us via contact forms or support channels.
• Usage data: How you interact with our platform, pages visited, and features used.
• Identity documents: Where you choose to verify your identity, the documents and photographs you upload, together with the personal details on them.
• Payment proof: Screenshots or photographs you attach to a peer-to-peer trade to evidence a payment.
• Payment method details: UPI handles, bank account references and wallet addresses you save in order to trade.
• Camera and files: The two items above are the only reason we ask for your camera or files. We take nothing from either without you choosing a file or taking a picture.
• Push notification token: If you install our mobile app and allow notifications, the identifier your phone's operating system gives us so a notification can reach your device and nobody else's. It is tied to your account and is removed when you sign out.

We do not use the advertising identifier on your phone, and the app requests no access to your location, contacts, calendar, messages or call history.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our portfolio tracking and analytics services
• Generate AI-powered portfolio insights and observations (for educational purposes only)
• Send important account notifications, updates, and subscription-related communications
• Respond to your questions and provide customer support
• Personalize your experience and tailor features to your portfolio
• Detect and prevent fraud, abuse, and security incidents
• Comply with legal obligations and enforce our terms

3. Exchange Data & API Keys

When you connect an exchange, we use read-only API keys only. We can view your balances and transaction history, but we cannot place trades, transfer funds, or take any action on your behalf.

Your private keys are never requested, stored, or transmitted. You retain full custody of your assets at all times. We recommend generating exchange-specific read-only API keys and deleting them from our platform if you stop using it.

4. Data Sharing

We do not sell your personal data. We may share your information in these limited circumstances:

• Service providers: Trusted third-party providers who help us operate the platform (email delivery, hosting, analytics). These providers are bound by data processing agreements.
• Legal requirements: If required by law, court order, or government authority.
• Business transfers: In connection with a merger, acquisition, or sale of assets, with appropriate notice.
• With your consent: For any other purpose with your explicit consent.

5. Cookies and Tracking

We use essential cookies to maintain your session and preferences. We may use analytics cookies to understand how users interact with our platform. You can control cookie settings through your browser.

We do not use third-party advertising cookies or cross-site tracking technologies.

6. Data Security

We implement industry-standard security measures including:

• TLS/HTTPS encryption for all data in transit
• AES-256 encryption for sensitive data at rest
• Bcrypt hashing for all passwords (we never store plain-text passwords)
• httpOnly cookies for session tokens (not accessible via JavaScript)
• Regular security audits and vulnerability assessments

No system is 100% secure. While we take all reasonable measures, we cannot guarantee absolute security. Please use a strong, unique password and enable two-factor authentication.

7. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal, tax, or compliance purposes.

Aggregated, anonymized data that cannot identify you may be retained indefinitely for analytics and product improvement.

A small number of records survive deletion because the law requires it or because they belong to somebody else as well as to you: payment and tax records, proof that an identity check was carried out, completed peer-to-peer trades, and security logs for a limited period. Where we keep one of these, we remove your name and contact details from it wherever we can. What happens when you delete your account explains this in full.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data ("right to be forgotten"). See Delete Your Account for how to ask and what happens next.
• Portability: Receive your data in a portable, machine-readable format.
• Objection: Object to processing of your data for certain purposes.
• Withdrawal of consent: Withdraw consent where processing is based on consent.

To exercise any of these rights, contact us at [email protected].

9. International Transfers

SmartViewAI operates from Dubai, UAE. If you are located in the European Economic Area (EEA) or other jurisdictions with data transfer restrictions, your data may be transferred to and processed in countries with different data protection standards.

Where required, we implement appropriate safeguards (such as standard contractual clauses) to protect your data in international transfers.

10. Children's Privacy

SmartViewAI is not intended for users under 18 years of age. We do not knowingly collect personal information from minors. If you become aware that a child has provided us with personal data, please contact us and we will take steps to delete that information.

11. AI-Generated Content

Our platform uses AI to generate portfolio insights, analysis, and educational content. This content is generated automatically based on your portfolio data and market information. AI insights are for educational purposes only and do not constitute financial advice.

AI outputs may contain errors or inaccuracies. Always verify important information independently and consult a qualified financial advisor for investment decisions.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or a prominent notice on our platform. Your continued use of the platform after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us: