BitBots Privacy Policy

This Privacy Policy applies specifically to the BitBots algorithmic trading platform. For our general privacy practices, please see our General Privacy Policy.

1. Information We Collect

1.1 Account and Identity Information

To comply with SEBI KYC requirements and prevent fraud, we collect:

• Full name and date of birth
• Email address and phone number
• PAN (Permanent Account Number)
• Aadhaar number (encrypted and stored securely)
• Bank account details for fund transfers
• Demat account information
• Address and identity verification documents

1.2 Trading and Financial Data

BitBots collects and processes:

• Trading Activity: Buy/sell orders, trade history, positions, holdings
• Market Data: Real-time NSE & BSE data, stock prices, indices
• Strategy Data: Algorithmic strategies, parameters, backtesting results
• Portfolio Information: Holdings, P&L, returns, risk metrics
• Transaction History: Deposits, withdrawals, brokerage charges
• Broker Integration: API keys, tokens, broker account details

1.3 Technical and Usage Data

We collect:

• IP addresses and device information
• Login times and session duration
• Trading platform usage patterns
• API call logs and performance metrics
• Browser type and operating system

2. How We Use Your Information

We use your information to:

• Execute Trades: Place and manage orders on NSE & BSE through broker APIs
• Algorithmic Trading: Run automated trading strategies on your behalf
• Risk Management: Monitor positions, calculate risk, implement stop-losses
• Compliance: Fulfill SEBI KYC/AML requirements and regulatory obligations
• Account Security: Detect fraud, prevent unauthorized access
• Customer Support: Provide technical assistance and resolve issues
• Platform Improvement: Analyze usage patterns to enhance features
• Notifications: Send trade alerts, margin calls, and important updates

3. Data Storage and Security

3.1 Encryption

All sensitive data is protected with:

• AES-256 Encryption: For data at rest
• TLS 1.3: For data in transit
• End-to-End Encryption: For broker API communications
• Hashed Passwords: Using bcrypt with salt

3.2 Data Centers

Your data is stored in:

• Secure data centers located in India (for regulatory compliance)
• ISO 27001 certified infrastructure
• Regular security audits and penetration testing
• 24/7 monitoring and intrusion detection

3.3 Access Controls

We implement:

• Two-factor authentication (2FA) mandatory for all users
• Role-based access control for our team
• Audit logs for all data access
• Regular access reviews and revocation

4. Data Sharing and Disclosure

4.1 Broker Integration

To execute trades, we share necessary information with:

• Your registered broker (Zerodha, Upstox, Angel One, etc.)
• Stock exchanges (NSE, BSE) as required for trade execution
• Clearing corporations for settlement

4.2 Regulatory Authorities

We may share data with:

• SEBI: Securities and Exchange Board of India
• Income Tax Department: For tax compliance
• Law Enforcement: When legally required
• Depositories: NSDL/CDSL for demat operations

4.3 We Do Not Sell Your Data

We never sell, rent, or trade your trading data, strategies, or personal information to third parties for marketing purposes.

5. Market Data and Real-Time Feeds

BitBots uses real-time market data from:

• NSE (National Stock Exchange): Live stock prices and indices
• BSE (Bombay Stock Exchange): Market data and quotes
• Data Vendors: Licensed market data providers

Market data usage is subject to exchange regulations and vendor terms.

6. Algorithmic Strategy Privacy

Your trading strategies are confidential:

• Strategy parameters and logic are encrypted
• We do not share your strategies with other users
• Backtesting results are private to your account
• You retain full ownership of your strategies
• We may use anonymized, aggregated strategy performance data for platform improvement

7. Financial Data Retention

We retain your data as follows:

• Trading Records: Minimum 5 years (SEBI requirement)
• KYC Documents: 5 years after account closure
• Transaction History: 7 years (Income Tax requirement)
• Account Data: Until you request deletion (subject to legal requirements)

8. Your Rights and Controls

You have the right to:

• Access: View all your trading data and account information
• Export: Download trade history, P&L reports, tax statements
• Modify: Update personal information and preferences
• Restrict: Pause or stop algorithmic trading at any time
• Delete: Request account deletion (subject to regulatory retention)
• Portability: Export data to migrate to another platform

9. Broker API Integration

When you connect your broker account:

• We use OAuth 2.0 for secure authentication
• API keys are encrypted and never logged in plain text
• You can revoke access anytime from your broker account
• We only request minimum necessary permissions
• API calls are rate-limited to prevent abuse

10. Risk Disclosures

Important trading risks:

• Algorithmic trading involves substantial risk of loss
• Past performance does not guarantee future results
• Market data delays may affect strategy performance
• System failures could result in missed trades or losses
• You are responsible for monitoring your positions and risk

11. SEBI Compliance

BitBots complies with:

• SEBI (Stock Brokers and Sub-Brokers) Regulations
• SEBI (Prohibition of Insider Trading) Regulations
• Prevention of Money Laundering Act (PMLA)
• KYC (Know Your Customer) norms
• Aadhaar Authentication requirements

12. Data Breach Notification

In case of a security breach:

• We will notify you within 72 hours
• Inform SEBI and relevant authorities as required
• Provide details of compromised data
• Offer remediation steps and support
• Conduct thorough investigation and implement fixes

13. Cookies and Tracking

We use cookies for:

• Session management and authentication
• Security and fraud prevention
• Platform performance monitoring
• User preference storage

We do not use third-party advertising cookies.

14. International Users

BitBots is designed for Indian residents trading on Indian exchanges. If you access from outside India, your data may be transferred to India for processing.

15. Children's Privacy

BitBots is not intended for individuals under 18. Trading accounts require legal age as per Indian regulations.

16. Changes to Privacy Policy

We may update this policy to reflect regulatory changes or new features. Material changes will be communicated via email and in-app notifications.

17. Contact Us

For privacy-related questions or concerns:

• Email: vivecpatel@gmail.com
• Phone: +91 700 8299 707
• Website: bitbots.in