1. Introduction

This Privacy Policy explains how NEXUS Trading ("we", "us", "our"), accessible at nextrady.com, collects, uses, stores, and protects your personal data when you use our automated cryptocurrency spot trading platform. We are committed to protecting your privacy and handling your data transparently and in accordance with applicable data protection laws, including the EU General Data Protection Regulation (GDPR). By using NEXUS Trading, you agree to the practices described in this policy. If you do not agree, please do not use the platform.

2. Data Controller

NEXUS Trading is the data controller responsible for your personal data. This means we decide how and why your data is processed. For any questions about this policy or how we handle your data, you can contact us at support@nextrady.com.

3. Data We Collect

We collect only the data necessary to operate the service: (a) Account data — email address, username, and a securely hashed password; (b) Contact data — Telegram chat ID, only if you opt in to notifications; (c) Exchange API keys — trade-only API keys for the exchange you connect (Pionex, Kraken, Revolut X or Gate), stored encrypted; (d) Trading data — your trades, positions, order history, fees, and performance statistics generated through the platform; (e) Technical data — IP address, browser type, device information, and server logs collected automatically for security and reliability. We do not collect special-category data (e.g. health, biometrics) and do not knowingly collect data from anyone under 18.

4. How We Use Your Data

We use your data to: provide and operate the automated trading bot on your behalf; execute and monitor trades through your connected exchange; calculate and collect platform fees on realized profits; display your dashboard, statistics, and leaderboard position; send you notifications you have opted into (e.g. via Telegram); maintain security, prevent fraud and abuse, and debug issues; and improve our algorithms and service. We do not use your data for automated decision-making that produces legal effects on you beyond the trading actions you have explicitly enabled.

5. Legal Basis for Processing (GDPR)

Where the GDPR applies, we process your personal data on the following legal bases: (a) Performance of a contract — to provide the trading service you signed up for; (b) Consent — for optional features such as Telegram notifications, which you can withdraw at any time; (c) Legitimate interests — to secure the platform, prevent fraud, and improve our service, balanced against your rights; and (d) Legal obligation — where we are required to retain or disclose data by law.

6. Exchange API Keys & Security

Your exchange API keys are the most sensitive data we hold, and we treat them accordingly. We only ever request trade-only API keys — we never request, and you should never grant, API keys with withdrawal permissions. API keys are encrypted at rest in our database and are used solely to execute trades and read account data on your behalf. They are never displayed back to you in full, never shared with third parties, and never used for any purpose other than operating your bot. You can remove your API keys at any time from your dashboard, which immediately stops the bot from trading on your behalf.

7. Cookies & Local Storage

We use strictly necessary cookies and browser local storage to keep you logged in (authentication tokens), remember your session, and store your interface preferences. We do not use advertising cookies and do not sell your browsing behavior. Because these technologies are essential to providing the service, the platform may not function correctly if you disable them in your browser.

8. Data Sharing & Third Parties

We do not sell, rent, or trade your personal data. We share data only where necessary to operate the service: (a) Cryptocurrency exchanges (Pionex, Kraken, Revolut X, Gate) — we transmit trade instructions through their APIs using your keys; (b) Telegram — only your chat ID and notification content, and only if you opt in; (c) Infrastructure providers — our hosting and database providers process data on our behalf under confidentiality obligations; and (d) Legal authorities — where we are legally required to disclose data. Any third party that processes data on our behalf acts as a processor under appropriate safeguards.

9. Data Retention

We retain your personal data for as long as your account is active and as needed to provide the service. Trading history may be retained to calculate fees, display historical statistics, and comply with any legal or accounting obligations. When you close your account, we delete or anonymize your personal data within a reasonable period, except where we are required to retain certain records by law. You can request earlier deletion as described in "Your Rights" below.

10. Your Rights (GDPR)

If you are in the EU/EEA (and in many other jurisdictions), you have the right to: access the personal data we hold about you; request correction of inaccurate data; request erasure of your data ("right to be forgotten"); restrict or object to certain processing; receive your data in a portable format; and withdraw consent at any time for processing based on consent. To exercise any of these rights, contact us at support@nextrady.com — we will respond within the timeframe required by law. You also have the right to lodge a complaint with your local data protection supervisory authority if you believe we have not handled your data lawfully.

11. Data Security

We take reasonable technical and organizational measures to protect your data, including encryption of API keys at rest, hashed passwords, encrypted connections (HTTPS), access controls, and isolation of sensitive systems. However, no method of transmission or storage is perfectly secure. While we work hard to protect your data, we cannot guarantee absolute security, and you use the platform at your own risk. If we become aware of a data breach affecting your personal data, we will notify you and the relevant authorities as required by law.

12. International Data Transfers

Our infrastructure and the exchanges we connect to may be located in different countries. Where your data is transferred outside your jurisdiction (including outside the EU/EEA), we take steps to ensure it remains protected by appropriate safeguards consistent with applicable data protection law.

13. Children’s Privacy

NEXUS Trading is not intended for anyone under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us and we will delete it.

14. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page. Your continued use of the platform after changes are posted constitutes your acceptance of the revised policy. We encourage you to review this page periodically.

15. Contact

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us at support@nextrady.com. We aim to respond to all inquiries within a reasonable timeframe. This Privacy Policy should be read together with our Terms & Conditions.