Privacy Policy

Last updated: June 24, 2026

This Privacy Policy explains how Sultrix ("we", "us") collects, uses, and protects your personal information when you use our website (sultrixtrade.com) and trading software.

1. Information We Collect

When you create an account or use Sultrix, we may collect:

• Account data: name, email address, hashed password
• License data: license key, plan type, expiry date, machine ID
• Payment data: order ID, payment status (we do not store card numbers — payments are processed by NOWPayments)
• Usage data: bot activity logs stored locally on your machine only
• Communication data: messages sent to us via support email

2. How We Use Your Information

• To create and manage your account
• To deliver and validate your software license
• To send transactional emails (welcome, license key, password reset)
• To send trading alerts via Telegram or WhatsApp (only if you configure these)
• To respond to support requests

3. Data Storage

Account and license data is stored in Cloudflare KV, hosted in the EU/US regions. Trading activity data (fills, PnL, settings) is stored exclusively on your local machine in a SQLite database. We do not have access to your trading data or exchange API keys.

4. WhatsApp and Discord

If you link your WhatsApp number or Discord account to Sultrix for chat queries, your messages are processed by our Cloudflare Worker and a third-party LLM provider (OpenRouter) solely to generate a response. Message content is not stored beyond the immediate request. You can disconnect at any time via the dashboard.

5. Data Sharing

We do not sell your personal data. We share data only with:

• Cloudflare: hosting, KV storage, and Worker execution
• Resend: transactional email delivery
• NOWPayments: payment processing
• OpenRouter: LLM responses for chat features (message text only, no account data)

6. Data Retention

Your account data is retained for as long as your account exists. You may request deletion at any time. Deleted accounts have their KV data removed within 30 days.

7. Security

Passwords are hashed with PBKDF2-SHA256. License keys and sessions use JWT tokens with 24-hour expiry. All API communications use HTTPS/TLS. We do not store your exchange API keys — these remain on your local machine only.

8. Your Rights

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data — see our Data Deletion page
• Withdraw consent for optional communications (WhatsApp/Discord chat)

9. Cookies

Our website uses no tracking cookies. We use a session token (JWT) stored in your browser's localStorage for dashboard authentication only.

10. Children

Sultrix is not intended for users under 18. We do not knowingly collect data from minors.

11. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes by email.

12. Contact

For privacy requests or questions, contact us at support@sultrixtrade.com or use our data deletion form.