ALF Privacy Policy

Effective date: April 2, 2026

1. Who We Are

ALF is an automated cryptocurrency trading system with an AI consultant, operated as a Telegram Mini App. Contact: @alf_traderbot.

Data	Purpose	Legal Basis (GDPR)	Retention
Telegram ID, name, username	User identification	Contract performance	Until account deletion
Language (language_code)	Interface localization	Contract performance	Until account deletion
Bybit API keys	Exchange connection for trading	Contract performance	Until account deletion
Strategy parameters	Trading algorithm configuration	Contract performance	Until account deletion
Trade history	Performance analysis, AI consultations	Contract performance	Until account deletion
IP address	Security logging	Legitimate interest	90 days
Chat messages with the bot	Context for AI consultant	Consent	Until account deletion

API keys are encrypted using AES-256-GCM and stored in encrypted form in the database
Key files on the server are accessible only to the trading engine (Unix permissions, mode 600)
Isolation: the AI agent has no access to API keys or trading code
SSL/TLS: all connections are encrypted
Servers are located in Europe (Hetzner, Finland)

We do not share your personal data with third parties, except:

Bybit — receives your trading orders via API (you provide the keys yourself)
Telegram — message processing and payments via Telegram Bot API

We do not sell data, do not use it for advertising, and do not share it with analytics services.

In accordance with the General Data Protection Regulation (GDPR) and applicable law, you have the right to:

Right of access — request and receive a copy of all personal data we store about you
Right to erasure — request complete deletion of your data. All data will be permanently deleted, including trade history, settings, and encrypted keys
Right to data portability — receive your data in a machine-readable format (JSON) for transfer to another service
Right to restriction of processing — suspend processing of your data without deleting your account
Right to rectification — request correction of inaccurate data
Revoke API keys — you can delete keys on the Bybit side at any time, and trading will stop

We commit to responding to your request within 30 days.

To exercise your rights, email support@alftrader.pro or contact @alf_traderbot.

The Mini App uses only technical cookies for authentication (JWT token). We do not use Google Analytics, tracking pixels, or advertising cookies.

The service is intended for persons aged 18 and over. We do not collect data from minors.

If the policy changes, we will notify users through the bot. The current version is always available at this address.

Privacy questions: @alf_traderbot