Privacy Policy — ArbiBoss

1. Who we are

ArbiBoss (arbiboss.com) is an algorithmic cryptocurrency arbitrage platform. The data controller is a company registered in Georgia. For all questions related to data processing, contact: support@arbiboss.com.

2. What data we collect

Account data Email, hashed password, username

Exchange API keys Stored encrypted (AES-256). Withdrawal permissions are intentionally not requested.

Trade history Pairs, exchanges, spreads, execution time

Payment data Sender address, TXID, network, amount. Card data is not stored.

Technical data IP address, User-Agent, error logs

3. How we use data

Executing arbitrage trades on your behalf on connected exchanges
Authentication and account protection
Sending notifications about executed trades and subscription status
Diagnosing and resolving technical issues
Complying with applicable legal requirements

We do not sell or share your data with advertising networks. The platform operates without ads.

4. API keys and security

Exchange API keys are the most sensitive data on the platform. We apply the following measures:

AES-256 encryption at rest and TLS 1.3 in transit
Keys are never fully displayed in the interface after saving
Only the trading engine has access to decrypted keys during trade execution
We strongly recommend creating keys without withdrawal permissions
When you delete your account, all keys are permanently removed

5. Third-party data sharing

Data may only be shared in the following cases:

Exchanges API requests via your keys to execute trading operations

Infrastructure Cloud servers (data does not leave the secure perimeter)

Legal requirements Upon justified request from authorized authorities, with user notification where permitted

6. Data storage

Data is stored on servers within the EU/Georgia. Trade history is retained indefinitely for audit purposes; you may request its deletion. Technical error logs are deleted after 90 days. Upon account closure, all personal data is deleted within 30 days, except data we are required to retain by law.

7. Your rights

Access — request a copy of all data we hold about you
Rectification — update incorrect data
Erasure — request complete deletion of your account and data
Restriction — restrict the processing of your data
Portability — receive your data in a machine-readable format

To exercise any of these rights, write to support@arbiboss.com. We will respond within 5 business days.

8. Cookies

We only use technically necessary cookies:

.AspNetCore.Antiforgery.* CSRF attack protection. Session cookie, deleted when the browser is closed.

.AspNetCore.Session Authenticated user session identifier. 30 days.

Advertising, analytics, and tracking cookies are not used.

9. Contact

Privacy inquiries: support@arbiboss.com
Support: support@arbiboss.com
Telegram: @Arbi_Boss

We reserve the right to update this policy. We will notify you of significant changes by email.

PrivacyPolicy