Privacy Policy

We collect the following categories of information:

• Account information. When you sign in with Google or Telegram, we receive basic profile information from that provider, such as your name, email address, username, profile photo, and a unique account identifier. We use this solely to create and secure your account.
• Subscription and payment information. We record your subscription status and the details of on-chain (USDT/USDC) payments needed to provide and support your subscription. We do not store private keys or seed phrases.
• Usage and device data. We collect limited technical data such as IP address, browser type, pages viewed, and interaction events to operate, secure, and improve the Service.

• To authenticate you and provide access to your account and dashboard.
• To deliver real-time arbitrage signals, analytics, and the features you request.
• To process subscriptions, prevent fraud, and provide customer support.
• To maintain security, debug issues, and improve the Service.
• To comply with legal obligations and enforce our Terms of Service.

When you sign in with Google, we access only your basic Google profile and email address, and only for authentication and account management. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, and we do not sell it or transfer it to third parties except as needed to provide the Service, comply with the law, or as part of a business transfer.

We do not sell your personal information. We share it only:

• With service providers that help us operate the Service, such as our authentication provider (Auth0), Telegram, and hosting and infrastructure providers, bound by confidentiality obligations.
• When required by law, regulation, legal process, or to protect the rights, safety, and security of our users and the Service.
• In connection with a merger, acquisition, or sale of assets, subject to this policy.

We retain your information for as long as your account is active or as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. When you delete your account, we delete or anonymize your personal information unless we are required to retain it by law.

We use industry-standard measures, including encryption in transit and at rest where appropriate, to protect your information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. You are responsible for keeping your login credentials secure.

Depending on your location, you may have the right to access, correct, delete, or restrict the processing of your personal information, to object to processing, and to data portability. Users in the EEA/UK (GDPR) and California (CCPA/CPRA) have additional rights. To exercise any right, contact us using the details below. You may also revoke Google access at any time via your Google Account permissions.

Your information may be processed in countries other than your own. Where we transfer personal data internationally, we take steps to ensure it receives an adequate level of protection consistent with applicable law.

The Service is not directed to individuals under 18, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and, where appropriate, provide additional notice. Your continued use of the Service after changes take effect constitutes acceptance of the revised policy.

If you have questions or requests regarding this Privacy Policy or your data, contact us at support@instantarbitrage.io or via Telegram at @instant_arbitrage.