Privacy Policy

This policy explains how GOU Crypto Bot (https://goucryptobot.com) collects, uses, shares and protects your data when you visit our website, buy a VIP membership through our Telegram bot (@gou_crypto_bot), and connect an API key for auto-trading. It also explains your rights and how to exercise them.

1. Who Is Responsible for Your Data

Your personal data is processed by GOU Crypto Bot, as the party responsible for it (data controller), for the purposes described in this policy. The official channel for questions and requests is our Telegram bot (@gou_crypto_bot).

2. Data We Collect

• Telegram data: your Telegram user ID, username and display name.
• Consent records: the consents you give (18+ declaration, agreements, data-processing consent), the text version and the date and time.
• Membership and payment records: chosen plan, amount, transaction ID (TX hash), payment and verification dates, membership start and end dates, and VIP channel join and leave dates.
• If you use auto-trading: your encrypted exchange API key and secret key; key check results (validity, permissions, position mode); balance information and the trade amount you approved; records of the orders and positions placed on your account (coin, direction, amount, price, result).
• Referral source: the source tag of the link you used to open the bot (for example, which button on the website).
• Technical records: event logs about how the service runs (for example, consent, payment and order steps); standard server logs (for example, IP address) that our hosting provider may keep when you visit the website, for security and operation.

We do not ask for or process your full name, email address, phone number, date of birth, ID number or exchange password.

3. Why We Use Your Data

• To run membership and payment processes, give you access to the VIP channel and remove it when your period ends.
• If you choose auto-trading: to send orders to your exchange account, monitor your account and position status, and warn you.
• To record your 18+ declaration and legal consents and to meet our legal and financial obligations.
• To keep the service secure and prevent misuse.
• To communicate with you and send reminders and support.
• To measure which promotional channels work (referral source tag).

Your data is never sold to third parties for marketing purposes.

4. Legal Bases

• Contract: processing that is necessary to set up and perform your membership (and auto-trading, if you choose it).
• Legal obligation: keeping consent and payment records required by law, including accounting and tax records.
• Legitimate interest: security, preventing misuse and measuring which promotional channels work.
• Consent: the transfer of your data to service providers abroad (see section 6), which you give in the bot.

5. Protecting Your API Key

• The message containing your key is deleted from the chat immediately and replaced by a confirmation message that shows only the last 4 characters of the key. The key is stored in the database encrypted with AES-256 and is never saved as plain text.
• The key is used only to place orders on your behalf and to check your account status; keys with withdrawal permission are not accepted.
• When you switch off auto-trading and delete your key from the bot, or when your membership is not renewed within 30 days after it ends, the key is deleted from our system. Revoking the key on your exchange also ends our access immediately.

6. Sharing and International Transfers

To provide the service, your data is shared with our hosting (Vercel), database (MongoDB Atlas) and messaging (Telegram) providers. If you use auto-trading, your orders are sent to your exchange (MEXC) through your API key. The servers of these providers are located abroad, outside the country where you or we may be located. Data is transferred only as far as needed for these purposes and with the necessary technical and organisational measures in place. Access to the database is protected by authentication and encryption in transit (TLS).

7. How Long We Keep Your Data

• Payment records are kept for 5 years as required by tax and accounting rules.
• Your API key is deleted when you switch off auto-trading and delete it, or when your membership is not renewed within 30 days after it ends.
• Other data is kept for as long as needed for the membership relationship and any possible disputes; after that it is deleted or anonymised.

8. Cookies

The website may use only the technical cookies needed for the site to work and stay secure. No analytics, advertising, marketing or tracking cookies are used.

9. Your Rights

You have the right to:

• find out whether your personal data is processed and, if so, request information about it and access it;
• learn the purpose of the processing and whether your data is used in line with that purpose;
• know the third parties, at home or abroad, to whom your data is transferred;
• ask for incomplete or inaccurate data to be corrected;
• ask for your data to be deleted, and for any correction or deletion to be passed on to the third parties it was transferred to;
• object to processing, including to a result against you that comes solely from automated analysis;
• withdraw your consent at any time;
• claim compensation if you suffer damage because of unlawful processing;
• lodge a complaint with the data-protection supervisory authority where you live.

You can send your requests through our Telegram bot (@gou_crypto_bot). Records that we are legally required to keep (for example, payment records) cannot be deleted before that period ends.

10. Your Consent

By tapping the consent button in the Telegram bot, you confirm that you have read this Privacy Policy and that you give your explicit consent to the processing of your personal data for the purposes above and to its transfer to service providers abroad (and, if you use auto-trading, to your exchange). You can withdraw your consent at any time; withdrawal does not affect processing that took place before it, but it may no longer be possible to provide the service.