Privacy Policy

Introduction

Welcome to the CoTrading Privacy Policy. This document explains how CoTrading ("we", "us") collects, uses, and protects your information when you use the CoTrading desktop application and the cotrading.io website.

CoTrading is a local-first desktop application. Wherever possible, your data stays on your own machine.

Local-First & Your Trading Keys

CoTrading does not custody, hold, or touch your trading funds. You bring your own exchange API keys, and:

• You should grant those keys trading permission only and disable withdrawals.
• Your exchange API keys and AI provider API keys are stored on your own device.
• Those keys are never uploaded to our servers and are never written to logs.
• Your chart data, trade history, and local configuration remain on your device unless a feature you enable (such as watchlist sync) explicitly syncs a specific item.

Information We Collect

When you create a CoTrading cloud account and use hosted features, we collect a minimal set of data:

• Account Information: Your email address and, if you sign in with Google, the basic profile information Google provides.
• Subscription Status: Your current plan (Free, Pro, Max, or Ultra) and AI model credit balance, so we can provide the service you subscribed to.
• Watchlist: If you enable watchlist cloud sync, your saved symbols are stored so they can sync across your devices.
• Usage & Device Data: Limited technical information about how you interact with the cotrading.io website, such as IP address, browser type, and pages visited.

We do not collect your exchange API keys, your positions, or your order history on our servers.

Website Analytics

We measure how the cotrading.io website is used so we can improve it. This applies to the website only — the desktop application does not report your trading activity to us.

• Umami — self-hosted on our own infrastructure, cookieless, and does not track you across other websites. It records page views, referrer, approximate region, and device type.
• Google Analytics 4 — sets cookies, and is therefore off by default. It loads only if you accept analytics cookies on the banner shown on your first visit.
• Microsoft Clarity — records anonymised session replays and heatmaps of how you move through the website, with text input masked. It sets cookies and is likewise off by default, loading only if you accept analytics cookies.

If you are signed in, we associate this data with your account identifier — a random, non-guessable string. We do not send your email address, your name, or any trading data to these tools. See our Cookie Policy for details and how to change your choice.

How We Use Your Information

We use your information for the following purposes:

• To provide, maintain, and secure the CoTrading service
• To authenticate you and manage your subscription and AI model credits
• To sync features you enable, such as your watchlist
• To provide customer support
• To detect, prevent, and address technical or security issues

Data Security

We implement appropriate security measures to protect the account data we hold from unauthorized access, alteration, disclosure, or destruction.

Third-Party Processors

We rely on a limited set of third-party processors to operate the Service. They only receive the data necessary to perform their function and are not permitted to use it for unrelated purposes. These include:

• Identity / authentication provider — for Google and email sign-in.
• Payment processor — a third party acting as merchant of record, to handle subscription billing. We do not store your full payment-card details.
• AI model providers — for hosted AI features (which provider is used depends on the model selected).
• Cloud hosting & infrastructure providers — for running the website, database, and email delivery.
• Google Analytics and Microsoft Clarity — for website analytics and session replay, only if you accept analytics cookies. Our Umami analytics is self-hosted and involves no third party.

International Data Transfers

CoTrading operates as a global service. The limited account data described above may be stored and processed on servers located outside your country or region. By using the Service, you consent to such cross-border transfer and processing, carried out with appropriate safeguards.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page.

Contact Us

If you have any questions about this Privacy Policy, please email us at [email protected] or contact us.