Privacy Policy
• We do not collect your funds. Your funds always remain in your own exchange account.
• Your API Secret key is stored encrypted and cannot be viewed in plaintext once saved.
• We do not sell your data to third parties for advertising purposes.
• You may request deletion of your personal data upon account withdrawal.
01 Personal Information We Collect
AntProfit collects only the minimum personal information necessary to provide the Service.
| Collection Point | Data Collected | Required / Optional |
|---|---|---|
| Account registration | Email address, password (encrypted), name, username (nickname), country of residence (to derive notification time zone) | Required |
| Profile setup | Name, Telegram ID | Optional |
| API key registration | Exchange API Key and API Secret (both stored encrypted, no plaintext retained), exchange name | Required for Service use |
| During Service use | Bot configuration, trade history (fill price, quantity, fees), P&L data, access IP, browser info, device identifier (a hash of browser characteristics — see Article 7) | Auto-collected |
| Payment | USDT deposit transaction hash (TxHash), deposit wallet address | Required for payment |
| Referral program | Referral code, referral relationship (Tier 1 & 2), reward payment history | Upon program participation |
| Customer support inquiry | Inquiry content, attachments, email | Upon inquiry |
| AI consultation & voice commands | Conversation content, text transcribed from voice commands, a summary of your usage state needed for the answer (balance, plans, registered exchange names — never your email or name) | When using the feature |
02 Purpose of Collection
Collected personal information is used solely for the following purposes:
- Service provision: Account management, bot operation, P&L reporting, notification delivery
- Payment processing: USDT deposit confirmation, subscription renewal, balance management
- Security & fraud prevention: Account takeover prevention, multi-account detection, referral fraud prevention
- Customer support: Inquiry handling, technical assistance
- Marketing (opt-in): Promotional information such as top-up bonuses and events — a separate consent item at signup; declining has no effect on service use and can be withdrawn anytime in notification settings.
- Service improvement: Algorithm performance analysis via anonymized aggregate data
- Legal obligations: Record-keeping obligations under applicable laws
Personal information will not be used for purposes beyond those listed above. Separate consent will be obtained if purposes change.
03 Retention & Usage Period
| Data Category | Retention Period | Basis |
|---|---|---|
| Account information (email, password, etc.) | Deleted within 30 days of withdrawal | Purpose of service provision fulfilled |
| Trade history & P&L data | 1 year after withdrawal | Dispute resolution, fraud investigation |
| Payment & USDT transaction records | 5 years | E-commerce Act and related laws |
| API key information | Deleted immediately upon withdrawal | No longer necessary |
| Access logs (IP, browser) | 3 months | Security & unauthorized access prevention |
| Consent records (terms agreement timestamps, etc.) | 5 years | Legal dispute preparation |
| Customer support inquiry records | 3 years | Service quality management |
Destruction procedure and method: Personal information whose retention period has expired is destroyed without delay. Account information is automatically anonymized 30 days after account deletion, trade history is deleted one year after deletion, and only payment and consent records subject to statutory retention are stored separately for the required period before destruction. Electronic files are deleted in a manner that prevents recovery.
04 API Key & Trade Data Processing
API keys are the most sensitive information in the Service and are subject to special security handling:
1. When you enter your API Secret, it is transmitted to the server over HTTPS
2. The server encrypts it on receipt — plaintext is never stored
3. Once saved it is never shown to you in plaintext again; the screen displays only a masked form
4. It is used only at the moment an order is placed, and is cleared from memory immediately afterward
Trade data processing:
- Trade records executed by the bot (order price, quantity, fill time, fees) are stored to provide P&L reporting.
- This data is accessible only from the respective user's dashboard and is not disclosed to other users.
- Anonymized aggregate statistics exclude performance metrics such as returns, and are used solely to improve service quality.
05 Disclosure to Third Parties
AntProfit does not, as a general rule, provide your personal information to third parties.
Exceptions may apply only in the following circumstances:
- With your prior consent
- As required by law or upon a lawful request by an investigative authority (prior notice to the user is the principle; exceptions apply where legally prohibited)
- In the event of a service acquisition or merger — users will be notified and consent obtained in advance.
Relationship with connected exchanges: The Service communicates with exchanges (HTX, BingX, DigiFinex, etc.) via your API key. In this process, each exchange processes data according to its own privacy policy. Please review the privacy policy of each exchange separately.
06 Processing Consignment & International Transfers
The following processing tasks are consigned to service providers, some of which are located outside your country. Transfers occur over encrypted connections (TLS) at the moment you use the relevant feature.
| Consignee (country) | Consigned task | Data transferred | Retention |
|---|---|---|---|
| Hostinger International Ltd. (Lithuanian entity · web/DB servers: Jakarta, Indonesia · bot execution/data servers: Frankfurt, Germany) |
Web & database hosting, bot execution servers (VPS), notification email delivery (SMTP) | All data stored by the service; email address and notification content | Duration of the service contract / emails deleted right after delivery |
| Cloudflare, Inc. (USA) | CDN, security (WAF), bot protection (Turnstile) | Access IP, browser information, request metadata (in transit) | Transit only — no separate storage of our personal data |
| Groq, Inc. (USA) | AI consultation, command interpretation (language-model API) | Conversation content, command text, usage-state summary (Article 1) — never your email or name | Processed to generate the response / retained per the provider's policy |
| OpenAI, L.L.C. (USA) | Voice guidance synthesis (TTS) / backup AI consultation processing when Groq is unavailable (fallback) | Text to be read aloud / (fallback only) conversation content and usage-state summary | Immediately after processing |
| Tavily, Inc. (USA) | Web search for AI consultation | Search queries (e.g. coin names — no personal data) | Immediately after processing |
| Google LLC (USA) | App push notifications (FCM), web fonts | Push token and notification text / access IP when fonts are requested | Until the push token is revoked (app uninstall or account deletion) |
| Telegram Messenger Inc. (UAE) | Telegram notifications and Telegram login (when you link it) | Telegram ID and username, notification content | After delivery / until unlinked |
| Alchemy Insights, Inc. (USA) | Blockchain deposit detection (webhooks) | Deposit wallet addresses and transactions (public blockchain data) | Immediately after processing |
Consignees may not use personal information for purposes beyond the consigned tasks; the Company secures this through contracts or each provider's data-processing terms. If a consignee changes, this Article is updated and announced.
07 Cookies & Device Identification
AntProfit uses only the cookies and device identifier needed to run the service and protect your account:
| Type | Purpose | Retention |
|---|---|---|
| Session cookie (essential) | Login session maintenance, CSRF protection | Deleted on browser close |
| Stay-signed-in cookie (optional) | Automatic re-login on devices where you chose "Remember me" (applied by default in the app) | 30 days |
| Language preference cookie (functional) | Remembers the selected language (ko/en/zh/ja) | 1 year |
Device identifier cookie ant_did (security, essential) |
Stores a hash of browser characteristics (canvas/WebGL rendering, screen resolution, language, browser type, etc.). Used only to block banned devices, skip two-factor prompts on trusted devices, and analyse abnormal logins. Not used for advertising, analytics, or linking with other websites. | 1 year |
You may delete or block cookies in your browser settings; however, blocking essential cookies may prevent features such as login from working properly.
08 Security Measures
The Company applies the following technical and administrative security measures to protect personal information:
Technical Security
- All communications are encrypted with HTTPS
- Passwords are stored as one-way hashes and cannot be recovered
- API Secrets are stored encrypted (plaintext is not retained)
- SQL Injection, XSS, and CSRF defense code applied
- Brute-force login attack protection (rate limiting, account lockout)
- Two-factor authentication (TOTP-based 2FA) available
- Regular security vulnerability assessments
Administrative Security
- Internal access to personal information restricted to minimum necessary staff (principle of least privilege)
- Access logs for personal information recorded and audited regularly
- Immediate deactivation of accounts upon employee departure
09 Your Rights
You may exercise the following rights regarding your personal information:
- Right of access: View the personal information items and content the Company holds about you
- Right to rectification: Request correction of inaccurate or incomplete personal information
- Right to erasure (right to be forgotten): Request account withdrawal or deletion of specific personal information
- Right to restriction of processing: Request suspension of personal information processing for specific purposes
- Right to data portability: Request export of collected personal information in a structured format
- Right to withdraw consent: Withdraw optional consents such as marketing communications at any time
• Access and correction: Dashboard → Settings (view and edit your profile, notification and wallet details directly)
• Deletion (account closure): Dashboard → Settings → Delete Account (processed immediately; your balance is refunded to your registered wallet)
• Restriction and withdrawal of consent: turn off notifications or integrations in Settings, or ask us through the channel below
• Other access, portability (export) and objection requests: Contact us or [email protected]
We respond within 7 business days of receipt. Requests may also be made through an authorized representative, in which case we verify the authorization.
Please note that information subject to statutory retention obligations or involved in ongoing disputes may not be immediately deletable; we will explain the reason in such cases.
10 Children's Privacy
AntProfit does not provide the Service to persons under the age of 18. By registering, you confirm that you are 18 years of age or older.
If we become aware that personal information of a person under 18 has been collected, the Company will delete that information without delay and suspend the account. If you suspect that a minor's personal information has been collected, please report it to [email protected].
11 Policy Amendments
This Policy may be revised in response to changes in laws, regulations, or service restructuring.
- Material changes will be notified via service announcements and email at least 30 days before taking effect.
- Continued use of the Service following a change will be deemed acceptance of the revised Policy.
- Change history is available at the bottom of this page.
12 Privacy Officer
The following Privacy Officer has been designated to handle inquiries, complaints, and remedy of damages related to personal information:
• Email: [email protected]
• Security vulnerability reports: [email protected]
• General customer support: [email protected]
• Official website: https://antprofit.com
• Responsible team: Operations team (privacy protection and grievance handling) — submit inquiries and access requests via Contact us
Privacy-related inquiries will be answered within 7 business days.
If a complaint regarding personal information processing is not resolved, you may seek dispute resolution or counselling from the following bodies (Republic of Korea, where the service operator is based — you may also contact the supervisory authority of your own country).
- Personal Information Dispute Mediation Committee: +82 1833-6972 / www.kopico.go.kr
- Privacy Infringement Report Center (KISA): +82 118 / privacy.kisa.or.kr
- Supreme Prosecutors' Office, Cybercrime Investigation: +82 1301 / www.spo.go.kr
- Korean National Police Agency, Cyber Bureau: +82 182 / ecrm.police.go.kr
You may also want to review
ANT AI Assistant