Data Protection

Privacy Policy

Effective Date: 1 January 2026 · Last Updated: 12 February 2026

SterlingVault AI ("we", "us", or "our") values your personal privacy and is committed to handling your data transparently, securely, and in accordance with applicable data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This Privacy Policy details the types of personal data we collect, why we collect it, how we use it, and your legal rights regarding your information.

Core Privacy Principle: We do not sell your personal data or your operational trading logs to third-party data brokers. All telemetry and analytical data are handled strictly to ensure application availability, security, and algorithmic performance.

1. The Data Controller

SterlingVault AI operates as the Data Controller responsible for the processing of your personal information collected through our official website and software services. If you have any inquiries regarding data protection, please contact our appointed Data Protection Officer at [email protected].

2. Categories of Information We Collect

We collect information that identifies or reasonably relates to you as an individual. This includes:

  • Identity & Contact Data: Name, email address, telephone contact number, and country of residence provided during account inquiries or platform communication.
  • Technical & Device Data: Internet Protocol (IP) address, operating system, browser type and version, language preference, hardware architecture, and session timestamps.
  • Trading Configuration Data: Encrypted, user-supplied read-and-trade API keys, automated bot execution settings, parameters, and telemetry performance logs. We strictly prohibit the input of API keys with asset withdrawal privileges.
  • Usage Analytics: Interaction patterns, navigational flow, latency metrics, error reports, and feature utilization within our software.

3. Legal Bases for Data Processing

Under the UK GDPR, we only process personal information where a valid legal basis exists:

  • Performance of a Contract: Processing required to establish your account, configure algorithmic trading modules, and deliver the software functionality you have requested.
  • Legitimate Interests: Improving software performance, safeguarding platform integrity against unauthorized attacks, auditing algorithmic reliability, and maintaining operational security.
  • Legal & Regulatory Obligations: Compliance with anti-fraud procedures, lawful judicial requests, tax reporting, or security disclosure rules.
  • Consent: Where you provide express consent for optional cookies or direct technical marketing updates. You may withdraw consent at any time.

4. How We Use Collected Data

The information gathered by SterlingVault AI is utilized exclusively for the following operational purposes:

  • Delivering, orchestrating, and monitoring algorithmic execution tools and data feeds.
  • Verifying account access and preventing unauthorized system breaches or cyber-attacks.
  • Providing customer service, operational notices, software updates, and incident reports.
  • Analyzing system telemetry to optimize algorithmic latency and server capacity.
  • Complying with applicable legal, security, and statutory record-keeping standards.

5. Disclosure of Personal Information

We may share specific categories of information with trusted third-party service providers who act as data processors under binding contractual agreements:

  • Infrastructure & Cloud Hosts: High-security server facilities and encrypted database providers located in the United Kingdom, European Economic Area, and certified secure regions.
  • Security & DDoS Protection: Specialized threat mitigation networks to prevent malicious bot activity and denial-of-service attempts.
  • Legal & Regulatory Authorities: Government bodies or law enforcement agencies when compelled by subpoena, court order, or mandatory statutory requirements.

6. International Data Transfers

Where personal data is transferred outside the United Kingdom or European Economic Area, SterlingVault AI ensures appropriate legal safeguards are implemented. These safeguards include the UK International Data Transfer Addendum, European Commission Standard Contractual Clauses (SCCs), or adequacy decisions recognizing an equivalent level of data protection.

7. Data Retention and Security Safeguards

We retain your personal data only for as long as necessary to fulfill the purposes for which it was gathered, including satisfying legal, reporting, or accounting requirements. Sensitive connection items such as exchange API keys are protected using AES-256 encryption at rest and TLS 1.3 encryption in transit.

When personal information is no longer needed, it is permanently deleted or irreversibly anonymized in compliance with our internal retention schedule.

8. Your Legal Rights

Under applicable United Kingdom and international data protection regulations, you possess enforceable rights regarding your personal data:

  • Right of Access: Request a copy of the personal information we hold about you.
  • Right to Rectification: Request correction of inaccurate, incomplete, or outdated data.
  • Right to Erasure: Request the deletion of your personal data where retention is no longer justified.
  • Right to Restriction: Request limitation of the processing of your data under specific statutory circumstances.
  • Right to Data Portability: Request the transmission of your data to you or a third party in a structured, commonly used format.
  • Right to Object: Object to processing based on legitimate interests or direct informational communications.

To exercise any of these rights, please contact our data team at [email protected]. We will respond within thirty (30) days as required by law.

9. Cookies and Local Storage

Our website utilizes necessary technical cookies and analytical session tokens essential for navigating the site, verifying cryptographic sessions, and remembering interface preferences. You can adjust your browser settings to decline or delete cookies; however, certain functional aspects of our software interface may be affected.

10. Updates to This Policy

We may update this Privacy Policy periodically to reflect technological changes, legal obligations, or service updates. All amendments will be published on this page with the revised effective date.

11. Regulatory Oversight

If you believe that our processing of your personal information infringes UK data protection regulations, you have the right to lodge a formal complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling their helpline.