Privacy Policy

1. Data controller

TMIYC Ltd, London, UK, is the data controller for personal data processed through tmiyc.trade. Contact our privacy team at hi@tmiyc.trade.

2. What we collect

• Account data: email address, password (stored as a salted bcrypt hash — we never store or can read your plain-text password).
• Billing data: subscription plan, billing cycle, last 4 digits of your card (full card numbers are never stored on our servers), payment/invoice history.
• Usage data: IP address at signup, pages viewed, feature usage, timestamps — used for security, fraud prevention, and product analytics.
• Whale-tier data: exchange API keys, encrypted at rest with a per-user envelope key. We request read/trade permissions only — never withdrawal permissions.
• Referral data: referral code, referred-by relationships, commission balance, and payout address (e.g. USDT TRC-20) if you request a payout.

3. Legal basis & purpose

We process personal data to: perform the subscription contract with you (Art. 6(1)(b) GDPR), comply with legal/tax obligations (Art. 6(1)(c)), and pursue legitimate interests such as fraud prevention and service improvement (Art. 6(1)(f)).

4. Where data is stored

Data is stored on servers located in the EU, encrypted at rest. Access is restricted to authorized personnel and protected by transport encryption (TLS) in transit.

5. Retention

Account and billing records are kept for as long as your account is active, plus the period required by applicable tax/accounting law after closure (typically up to 6 years for invoices). You may request earlier deletion of non-financial data at any time.

6. Sharing with third parties

We share data only with: (a) the payment processor handling your transaction, strictly to process payment; (b) infrastructure providers (hosting, email delivery) under data-processing agreements; (c) authorities where legally required. We do not sell personal data.

7. Your rights

Under GDPR you have the right to access, rectify, delete, restrict, or port your personal data, and to object to certain processing. Send requests to hi@tmiyc.trade — we respond within 30 days. You may also lodge a complaint with your local data protection authority.

8. Cookies

We use a minimal set of cookies: a referral-attribution cookie (30 days) and, where applicable, a session cookie for login state. We do not use third-party advertising trackers.

9. Changes

We may update this policy; material changes are announced via the changelog and, where required, by email at least 15 days in advance.

10. Contact

Privacy questions: hi@tmiyc.trade.