Legal
Privacy Policy
Last updated: July 2026
This Privacy Policy explains how ElStand AI (“we,” “us”) collects, uses, and protects information when you use our website and dashboard (together, the “Service”).
1. Information We Collect
- Account information — when you sign in with Google, we receive your name, email address, and profile picture from Google.
- Usage data — pages visited, features used, and general device/browser information, used to keep the Service reliable and to understand which tools are useful.
- Cookies — used to keep you signed in and to remember basic preferences. You can block cookies in your browser, though parts of the Service may stop working.
- Exchange API credentials (optional) — if you choose to connect a third-party exchange account for optional trading features inside the dashboard, your API key and secret are encrypted before storage and used solely to place and manage orders on your behalf, per your own configuration. We never request or store your exchange account password.
2. How We Use Information
- To provide, maintain, and improve the Service.
- To authenticate you and keep your account secure.
- To communicate with you about your account or changes to the Service.
- To understand aggregate usage patterns — we do not sell your personal data to advertisers.
3. Third-Party Services
We rely on a small number of infrastructure providers to run the Service: Google (sign-in), Supabase (account and application data storage), and, only if you choose to connect one, your cryptocurrency exchange’s own API. Each provider processes data under its own privacy terms.
4. Data Security
Sensitive credentials, including any exchange API secret you provide, are encrypted at rest. No method of storage or transmission is 100% secure, and we can’t guarantee absolute security — if you ever suspect a credential has been exposed, rotate it from your exchange’s dashboard immediately.
5. Data Retention
We retain account and usage data for as long as your account is active. You can request deletion of your account and associated data at any time (see “Your Rights” below).
6. Your Rights
Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to withdraw consent for optional features (like an exchange connection) at any time. Contact us to exercise any of these rights.
7. Children’s Privacy
The Service is not directed to anyone under 18, and we do not knowingly collect data from children.
8. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be reflected by updating the “Last updated” date above.
9. Contact Us
Questions about this policy or your data can be sent to support@elstand.ai.
Draft template — this page has not been reviewed by a lawyer. Confirm your governing jurisdiction, legal entity name, and any local data-protection requirements (e.g. Indonesia’s UU PDP) before publishing.