Privacy Policy

1. What we collect

• Account: your email and a one-way hash of your password (we never store the password itself).
• Exchange API keys: we accept read-only keys only. They are encrypted at rest and used solely to read your trading history and, if you opt in, your open positions. We can never trade, transfer, or withdraw with them.
• Trading data: performance metrics we compute from your exchange data (returns, win rate, drawdown, positions, etc.).
• Profile: anything you add — display name, bio, links, profile photo — and your privacy choices.
• Community & social: posts, comments, likes, follows, and reports you create.
• Payments: subscription invoices and the on-chain USDT payments and payout/wallet addresses you provide. On-chain transactions are inherently public on their blockchain.
• Technical: IP address, device/user-agent, and timestamps — used for sessions, security, and rate-limiting.

2. How we use it

• To run the service: verify your key is read-only, compute your metrics, and publish only what you choose to make public.
• To process prepaid subscriptions and, where eligible, prepare rewards/referral payouts.
• To send transactional email (verification, receipts, security and account notices).
• To keep the platform safe: moderation, abuse and fraud prevention, and security.
• To meet legal and accounting obligations.

We do not sell your personal data, and we do not run third-party advertising or tracking on the site.

3. What is public by design

If you publish your profile, your chosen display name, handle, verified metrics, badges, community posts, and leaderboard placement are visible to anyone. You control this: profiles are private until you publish, and you can unpublish at any time. Your privacy settings (percent-only, hide balances, hide symbols) govern what a published profile reveals. On-chain payments are public on the blockchain by nature.

4. Who we share it with

Only the processors needed to operate the service, acting on our instructions — currently our transactional email provider and our error-monitoring provider. We may disclose information if required by law or to protect the platform and its users. We do not sell or rent your data.

5. How we protect it

• Exchange API keys are encrypted at rest; the plaintext never touches a log or a public response.
• Passwords are stored only as strong one-way hashes.
• All traffic is served over TLS.
• We never hold your funds, never store private keys or seed phrases, and never sign transactions on your behalf.

6. Your controls

• Edit your profile, change privacy settings, or unpublish at any time.
• Remove your profile photo, delete your own posts and comments, and disconnect an exchange key.
• Request a copy of your data, or request account deletion, by contacting us through smcalpha.com. We will honour it subject to legal and financial record-keeping obligations.

7. Retention

We keep your data while your account is active and as needed for the purposes above. Backups are rotated on a fixed schedule. When you delete your account we remove or anonymise your personal data, except records we must retain for legal, tax, or fraud reasons.

8. Age

SMCAlpha is for adults. It is not intended for anyone under 18, and we do not knowingly collect their data.

9. Where your data is processed

Our infrastructure is hosted in the European Union. Using the service means your data may be processed there and in any country where our processors operate.

10. Changes & contact

We may update this policy; material changes will be reflected by the “last updated” date. This policy is governed by the laws of India. For any privacy request or question, contact SMCAlpha through smcalpha.com.