Privacy Policy

Last updated: January 29, 2026

1. Introduction

Monary ("we", "our", or "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our cryptocurrency copy trading platform.

2. Information We Collect

2.1 Information You Provide

  • Account Information: Email address, username, profile information
  • Wallet Information: Public wallet addresses (we never have access to private keys)
  • Trading Preferences: Copy trading settings, risk parameters, notification preferences
  • Communications: Support tickets, feedback, and correspondence with us

2.2 Information Collected Automatically

  • Device Information: Browser type, operating system, device identifiers
  • Usage Data: Pages visited, features used, time spent, click patterns
  • Log Data: IP address, access times, referring URLs
  • Cookies: Session cookies, preference cookies, analytics cookies

2.3 Information from Third Parties

  • Wallet Providers: Authentication data from Privy
  • Exchange Data: Trading data from Hyperliquid (positions, trades, balances)
  • Analytics Providers: Aggregated usage statistics

3. How We Use Your Information

We use your information to:

  • Provide, maintain, and improve our copy trading services
  • Process your copy trading instructions and manage your subscriptions
  • Send you trading signals, alerts, and notifications
  • Communicate with you about updates, security alerts, and support
  • Analyze usage patterns to improve user experience
  • Detect, prevent, and address technical issues and fraud
  • Comply with legal obligations

4. Data Sharing and Disclosure

We may share your information with:

4.1 Service Providers

  • Supabase: Database and authentication services
  • Privy: Wallet authentication
  • Hyperliquid: Trading execution (via your own account)
  • Vercel: Hosting infrastructure
  • Analytics Providers: Usage analytics (anonymized)

4.2 Legal Requirements

We may disclose your information if required by law, court order, or government request, or to protect our rights, privacy, safety, or property.

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

5. Data Security

We implement industry-standard security measures to protect your data:

  • Encryption in transit (TLS/SSL) and at rest
  • Secure authentication via wallet signatures
  • Regular security audits and penetration testing
  • Access controls and employee training
  • Incident response procedures

Important Security Note

We NEVER have access to your private keys or wallet seed phrases. Authentication is performed via cryptographic signatures. You maintain full custody of your assets at all times.

6. Data Retention

We retain your data for as long as necessary to provide our services and comply with legal obligations:

  • Account Data: Until you delete your account + 30 days
  • Trading History: 7 years (regulatory compliance)
  • Usage Logs: 90 days
  • Analytics Data: 26 months (anonymized)

7. Your Rights (GDPR)

If you are located in the European Economic Area (EEA), you have the following rights:

  • Access: Request a copy of your personal data
  • Rectification: Correct inaccurate or incomplete data
  • Erasure: Request deletion of your data ("right to be forgotten")
  • Restriction: Limit how we process your data
  • Portability: Receive your data in a machine-readable format
  • Objection: Object to certain processing activities
  • Withdraw Consent: Withdraw consent at any time

To exercise these rights, contact us at privacy@monary.io

8. Cookies and Tracking

We use the following types of cookies:

  • Essential Cookies: Required for authentication and security
  • Functional Cookies: Remember your preferences and settings
  • Analytics Cookies: Help us understand how you use our service

You can control cookies through your browser settings. Note that disabling certain cookies may affect functionality.

9. International Transfers

Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place, including:

  • Standard Contractual Clauses (SCCs)
  • Data Processing Agreements with service providers
  • Privacy Shield certifications where applicable

10. Children's Privacy

Our Service is not intended for anyone under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us: