Data Protection and Custody Boundaries
Privacy Policy for CryptoIQ Sentinel
This Privacy Policy explains what information CryptoIQ Sentinel collects, how account and trading-scoped credential data are protected, and the choices you have over your records.
Information we collect to operate the cockpit
When you create an account or use CryptoIQ Sentinel, we collect basic account identifiers such as your email address, authentication session metadata, subscription status, and cockpit configuration settings needed to deliver Watch, Paper, and Live workspace features.
We also log system telemetry, gate evaluation timestamps, and mode transitions so you can audit what your workspace observed and why a candidate trade was approved, vetoed, or held in a waiting state.
Encryption and isolation of trading-scoped API keys
If you choose to connect an exchange account for live validation, your API credentials are encrypted at rest with per-user isolation and decrypted only inside the execution service for the duration of an authorized request. CryptoIQ never requests withdrawal permissions or custody of your exchange funds.
You can rotate or revoke your exchange API keys at any time from your exchange dashboard or within the Sentinel settings panel, which immediately terminates live routing authority for those credentials.
Data sharing, retention, and your privacy rights
We do not sell personal information to third parties. Data is shared only with essential infrastructure and payment processors required to run the service, or when required by applicable law. Public decision receipts display strategy and market context without exposing private account credentials.
You may request access to, correction of, or deletion of your personal account data by contacting support through the help channels listed in the operator resources.
Operating modes and verification path
Every surface on CryptoIQ Sentinel separates read-only Watch observation, 10,000 USD simulated Paper practice with no cash value, historical Replay analysis, Shadow observation, and backend-certified Live venue execution. Operators can review public decision receipts, verify trading-scoped API key custody boundaries, and inspect gate refusal reasons before considering any live order path. Educational material only, not financial, investment, legal, or tax advice.