1. Introduction
Miwa ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our automated trading bot service.
Key Principle: As a non-custodial service, we never have access to your private keys or custody of your funds. Your wallet security is entirely under your control.
2. Information We Collect
2.1 Account Information
- Email address: For account creation and communications
- Wallet address: Public Solana wallet address for payment verification
- Access code: For account activation and verification
- Referral information: If you join via referral link
2.2 Trading Data
- Strategy configurations: Your trading strategy settings
- Trade history: Records of executed trades
- Performance metrics: Win rate, P&L, and other statistics
- Token interactions: Tokens detected and traded
2.3 Technical Information
- IP address: For security and fraud prevention
- Browser information: User agent, device type
- Usage data: Pages visited, features used, session duration
- Error logs: Technical errors for debugging
2.4 What We DO NOT Collect
- ✅ Private keys (never stored or transmitted)
- ✅ Seed phrases
- ✅ Wallet passwords
- ✅ Personal identification documents
3. How We Use Your Information
We use collected information for:
- Service Provision: Operating the trading bot and dashboard
- Account Management: User authentication and account security
- Performance Analytics: Displaying your trading statistics
- Communication: Service updates, important notifications
- Improvement: Enhancing features and user experience
- Security: Detecting fraud and preventing abuse
- Compliance: Meeting legal and regulatory requirements
4. Data Storage and Security
4.1 Encryption
All sensitive data is encrypted at rest and in transit using industry-standard encryption protocols (AES-256 for storage, TLS 1.3 for transmission).
4.2 Database Security
- Encrypted PostgreSQL database
- Access restricted to essential personnel only
- Regular security audits and updates
- Automated backups with encryption
4.3 API Keys
RPC endpoint URLs and API keys you provide are encrypted and stored securely. They are only used to execute trades on your behalf.
5. Data Sharing and Disclosure
5.1 Third-Party Services
We may share data with:
- Helius: RPC provider for blockchain interactions
- Solana Network: Public blockchain transactions are visible on-chain
- Analytics Services: Anonymized usage data for improvement
- Discord: If you opt-in to notifications
5.2 We DO NOT Sell Your Data
We never sell, rent, or trade your personal information to third parties for marketing purposes.
5.3 Legal Requirements
We may disclose information if required by law, court order, or government regulation.
6. Cookies and Tracking
We use cookies and similar technologies for:
- Authentication: Keeping you logged in
- Preferences: Remembering your settings
- Analytics: Understanding usage patterns (anonymized)
- Security: Preventing fraud and abuse
You can control cookies through your browser settings. Note that disabling certain cookies may affect functionality.
7. Your Rights (GDPR Compliance)
If you are in the European Economic Area, you have the right to:
- Access: Request a copy of your personal data
- Rectification: Correct inaccurate information
- Erasure: Request deletion of your data ("right to be forgotten")
- Portability: Receive your data in a machine-readable format
- Restriction: Limit how we process your data
- Objection: Object to certain data processing
- Withdraw Consent: Revoke consent for data processing
To exercise these rights, contact us at [email protected]
8. Data Retention
We retain your data for as long as your account is active or as needed to provide services. Specific retention periods:
- Account data: Until account deletion + 30 days
- Trade history: 2 years for tax and compliance purposes
- Logs and analytics: 90 days
- Legal holds: As required by law
9. Children's Privacy
Our Service is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.
10. International Data Transfers
Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.
11. Changes to Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes via email or dashboard notification. Continued use of the Service after changes constitutes acceptance of the updated policy.
12. Contact Us
For questions or concerns about this Privacy Policy or our data practices:
Summary of Our Commitment
- ✅ We never access your private keys or wallet
- ✅ We encrypt all sensitive data
- ✅ We never sell your personal information
- ✅ We comply with GDPR and data protection regulations
- ✅ You have full control over your data