Privacy Policy

01Who is responsible

Sentiora Technologies, which operates sentioratech.com from the United Arab Emirates, is responsible for your personal data (the "controller"). Contact for any privacy matter: [email protected].

We apply the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) and, for people in the EU or UK, the GDPR and UK GDPR.

02Data we collect

Account data: your email address and a hashed password (bcrypt); two-factor secrets if you enable 2FA.

Exchange API keys you add for live trading, encrypted at rest.

Subscription and payment records: plan, dates, amounts, payment method and, for crypto payments, the transaction details. Card details are handled by our card processor and never reach our servers.

Service data: your bot's trades and performance, your AI chat questions and credit usage, and notification settings.

Consent and security records: the Terms version you accepted, with the time, IP address and browser; sign-in and security logs.

03Why we use it (legal basis)

To provide the Services under our contract with you: your account, bot, AI answers, dashboard, billing and the notifications you set up.

To meet legal obligations, such as tax, accounting, anti-money-laundering and sanctions rules.

For our legitimate interests in keeping the Services secure and preventing fraud and abuse.

With your consent, for optional marketing. We don't send marketing without consent and we don't sell your data.

04Who we share it with

Service providers acting for us: Amazon Web Services (hosting), Cloudflare (security, content delivery and cookieless visit statistics), OpenAI (generating AI answers: we send your question and market data, not your name or email), Stripe (card payments, when offered) and Telegram (notifications, if you connect it).

Exchanges you connect, such as Binance or Bybit, receive the orders your bot places through your API keys.

Authorities, where the law requires it.

05International transfers

Some providers process data outside the UAE, for example in the United States, the European Union and India. We transfer data only as the applicable law allows, with appropriate safeguards such as the providers' data-processing terms.

06Storage and security

Data is stored on secured servers over encrypted connections. API keys are encrypted at rest, and each user's bot runs isolated from others. If a personal-data breach is likely to affect you, we will notify you and the relevant authority as the law requires.

07Retention and deletion

We keep account data while your account is open. When you delete your account, we delete your personal data, trade history and API keys, normally within 30 days, except records the law requires us to keep (for example payment, invoice and consent records), which we keep for up to 5 years and then delete.

08Cookies and local storage

We use your browser's local storage for your sign-in session and preferences (such as theme), and strictly necessary cookies only (for example Cloudflare's security cookie and the admin session). We don't use advertising or tracking cookies.

09Children

The Services are not for anyone under 18, and we do not knowingly collect their data.

10Your rights

You can ask to access, correct, delete, restrict or export your data, object to processing, withdraw consent, and not be subject to decisions based solely on automated processing that have legal effects on you. Email [email protected]; we reply within 30 days.

You can also complain to the UAE Data Office or, in the EU/UK, your local data-protection authority.