1. Introduction
Welcome to Dr. Gold Bot's Privacy Policy. This document outlines our policies regarding the collection, use, and disclosure of personal data when you use our service and the choices you have associated with that data.
We use your data to provide and improve the service. By using the service, you agree to the collection and use of information in accordance with this policy.
Key Definitions:
- Service: Refers to the Dr. Gold Bot trading platform and related services
- Personal Data: Data about a living individual who can be identified from that data
- Usage Data: Data collected automatically from using the service
- Cookies: Small files stored on your device
2. Information We Collect
2.1 Personal Information
When you register for our service, we collect:
- Full name and contact details
- Email address and phone number
- Account credentials (encrypted)
- Payment information (processed securely by third-party processors)
- Communication preferences
2.2 Trading Data
To provide our AI trading services, we collect:
- Trading account performance metrics
- Market analysis preferences
- Risk tolerance settings
- Trading strategy parameters
2.3 Technical Information
Automatically collected data includes:
- IP address and browser type
- Device information and operating system
- Usage patterns and service interactions
- Error reports and system logs
Data Minimization Principle
We follow the principle of data minimization - we only collect data that is necessary for providing our services and improving your experience with Dr. Gold Bot.
3. How We Use Your Information
| Purpose | Description | Legal Basis |
|---|---|---|
| Service Delivery | Provide, maintain, and improve our AI trading bot | Contractual necessity |
| Account Management | Process payments and manage subscriptions | Contractual necessity |
| Customer Support | Respond to inquiries and provide assistance | Legitimate interest |
| Performance Optimization | Improve algorithms and trading strategies | Legitimate interest |
| Security | Detect and prevent fraud and security issues | Legal obligation |
| Communication | Send updates, alerts, and marketing (with consent) | Consent/Legitimate interest |
| Legal Compliance | Comply with laws and regulations | Legal obligation |
4. Data Sharing and Disclosure
4.1 Service Providers
We engage trusted third parties to assist with:
- Payment Processing: Stripe, PayPal (we never store full payment details)
- Cloud Hosting: AWS, DigitalOcean with enterprise-grade security
- Analytics: Google Analytics (anonymized data only)
- Communication: Email and notification services
4.2 Legal Requirements
We may disclose your information:
- To comply with legal obligations
- To protect and defend our rights
- To prevent fraud or security issues
- To protect the safety of our users
4.3 Business Transfers
In connection with any merger, sale of company assets, financing, or acquisition, your information may be transferred as a business asset.
Data Processing Agreements
All third-party service providers sign strict data processing agreements ensuring they implement appropriate security measures and only process data for specified purposes.
5. Data Security
We implement comprehensive security measures to protect your data:
5.1 Technical Measures
- Encryption: AES-256 encryption for data at rest, TLS 1.3 for data in transit
- Access Controls: Role-based access, multi-factor authentication
- Network Security: Firewalls, intrusion detection systems
- Regular Audits: Security assessments and penetration testing
5.2 Organizational Measures
- Employee Training: Regular security awareness training
- Data Protection Officer: Dedicated privacy oversight
- Incident Response: Documented procedures for data breaches
- Privacy by Design: Built into all our processes
5.3 Limitations
While we implement industry-standard security measures, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security but we strive to use commercially acceptable means to protect your personal information.
6. Your Privacy Rights
Depending on your location, you may have the following rights:
| Right | Description | How to Exercise |
|---|---|---|
| Access | Request copies of your personal data | Submit request via email |
| Rectification | Correct inaccurate or incomplete data | Update in account settings or contact us |
| Erasure | Request deletion of your data | Submit deletion request |
| Restriction | Limit processing of your data | Contact privacy team |
| Portability | Receive your data in machine-readable format | Submit data export request |
| Objection | Object to certain data processing | Update preferences or contact us |
| Consent Withdrawal | Withdraw consent at any time | Update account settings |
Response Time: We will respond to all legitimate requests within 30 days. There is no charge for exercising your rights unless requests are excessive or unfounded.
8. Data Retention
We retain personal data only for as long as necessary:
| Data Type | Retention Period | Reason |
|---|---|---|
| Account Information | While account is active + 2 years | Service delivery |
| Transaction Data | 7 years | Legal requirements |
| Communication Data | 3 years | Customer service |
| Trading Performance | 10 years (anonymized) | Algorithm improvement |
| Marketing Data | Until consent withdrawn | Marketing purposes |
After retention periods expire, we securely delete or anonymize your data.
9. Children's Privacy
Our service is not intended for individuals under the age of 18 ("Children").
9.1 No Collection from Children
We do not knowingly collect personally identifiable information from anyone under the age of 18. If you are a parent or guardian and you are aware that your child has provided us with personal data, please contact us.
9.2 Age Verification
We may verify age during registration and reserve the right to terminate accounts of users found to be underage.
10. International Data Transfers
Your information may be transferred to and processed in countries other than your own.
10.1 Transfer Mechanisms
- EU-US Data Privacy Framework
- Standard Contractual Clauses
- Adequacy decisions
10.2 Safeguards
We implement appropriate safeguards to ensure your data remains protected during international transfers, including encryption and contractual commitments from our service providers.
11. Changes to This Policy
11.1 Updates
We may update this Privacy Policy periodically. The updated version will be indicated by an updated "Last Updated" date and will be effective immediately upon posting.
11.2 Notification
For material changes, we will:
- Post a notice on our website
- Send email notifications to registered users
- Provide advance notice when possible
11.3 Review Responsibility
We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.
12. Contact Us
If you have any questions about this Privacy Policy, please contact us:
Data Protection Officer
Email: privacy@drgoldbot.com
Address: Dr. Gold Bot Ltd., Data Protection Office, 123 Financial District, Suite 456, New York, NY 10005, USA
Phone: +1 (555) 123-4567 (Privacy Inquiries Only)
Hours: Monday-Friday, 9:00 AM - 6:00 PM EST
12.1 Supervisory Authority
If you are located in the European Economic Area (EEA), you have the right to lodge a complaint with your local data protection authority.