Privacy Policy

Setply is a private, invite-only workspace. This page describes exactly what data is stored, why, and how to have it removed.

Last updated: 13 August 2026

In short: we store what the service needs to work and nothing else. No advertising, no analytics trackers, no third-party profiling, no selling or sharing of personal data.

What we store

Data	Why
Email, first and last name, interface language	Account identity and sign-in
Password	Stored only as a bcrypt hash. We cannot read or recover your password.
Strategy and risk-profile preferences	Deciding which setups you are shown and, if enabled, traded
Exchange API key and secret (optional)	Placing and managing orders on your own account. Encrypted at rest with AES-256-GCM - see below.
Your trade records and their outcomes	Your own performance history and analytics export
Telegram chat identifier (optional)	Delivering notifications, only if you link the bot yourself
Server logs	Operating and debugging the service. Rotated and retained short-term.

Exchange credentials

Connecting an exchange account is entirely optional - the analysis features work without it.

API keys and secrets are encrypted at rest using AES-256-GCM with a key held only in the server environment.
They are decrypted in memory solely to sign requests to your exchange, and are never written to logs or exposed through the interface. Only a masked form of the key is ever displayed back to you.
They are used only to read your account state and to place, amend, and cancel orders. Withdrawal permission is neither required nor used - please do not grant it.
You can remove the connection at any time in the app, and revoke the keys at your exchange independently.

What we do not do

No advertising and no advertising identifiers.
No third-party analytics or behavioural tracking scripts.
No selling, renting, or sharing of personal data.
No payment data of any kind - we do not process payments at all.
No cookies beyond what is needed to keep you signed in.

Sign-in and storage

Authentication uses a signed access token stored in your browser. It exists to keep you signed in and is not used for tracking. Data is stored on our own server infrastructure and transmitted over HTTPS.

Third parties

The service communicates with your chosen exchange (for market data and, if you connect an account, for your orders) and, if you link it, with Telegram to deliver notifications. Those providers process data under their own policies. We do not send your personal data to anyone else.

Retention and deletion

Account data is kept while your account exists. You may request deletion of your account and associated data at any time by contacting us; removing your account also removes your stored exchange credentials, trade records, and notification links. Server logs age out on their own rotation schedule.

Your rights

You may request access to, correction of, or deletion of your personal data, and you may withdraw consent for optional features such as exchange connection or Telegram notifications simply by removing them in the app.

Contact

Privacy questions and deletion requests: support@setply.net