Privacy Policy

1. Information We Collect

To deliver non-custodial signal execution, billing, and platform security, we collect the following categories of information:

• Account & Identity Information: Email address, hashed password credentials, and email verification status when you create an account on the Platform.
• Encrypted Exchange API Credentials: Third-party exchange (e.g., Bybit) API keys and API secrets submitted by you. All API keys and secrets are encrypted at rest using AES-256 and are never stored or logged in plaintext. Tadex strictly enforces trade-only permissions and rejects any API keys with withdrawal capabilities enabled.
• Telegram Identifiers: Telegram user IDs and usernames when you link your Telegram account to the platform or interact with the Tadex Telegram execution bot.
• Signal Provider Verification Data: For users applying to become Signal Providers, we collect operational identity information, verified trading track records (such as read-only exchange statements or verified profile links), trading focus areas, and referral sources.
• Billing & Transaction Metadata: Payment currency (NGN, USDT, USD), gross subscription amounts, itemized platform fee deductions, transaction timestamps, external payment gateway reference codes, and gateway transaction IDs (via Flutterwave or Paystack). Note: Tadex never collects, stores, or processes credit/debit card numbers or bank account PINs; all payment processing is handled on certified, secure hosted payment gateway pages.
• System, Execution & Audit Telemetry: Masked API key representations (e.g.,...a1b2), trade execution logs, position monitoring status, IP addresses, session timestamps, and administrative audit logs for security incident response and emergency kill-switch events.
• Waitlist Submissions: Email addresses, planned trading volume, and automation preferences voluntarily submitted via waitlist forms.

2. How We Use Your Information

We use collected information solely for the following operational purposes:

• Authenticating your identity and maintaining secure session access.
• Routing user-authorized automated trade signals to your connected exchange account via trade-only API keys.
• Processing subscription billing, calculating transparent platform automation fees, and verifying payment settlements.
• Auditing and approving Signal Provider applications to protect community trading standards.
• Delivering real-time execution alerts, position status updates, and security notifications via web and Telegram.
• Maintaining immutable compliance audit logs and enforcing operational safety controls (such as emergency kill-switches).

3. Data Security & Encryption Standards

We employ strict industry-standard technical and operational security controls to safeguard your data:

• AES-256 Encryption at Rest: All exchange API keys and secrets are encrypted with AES-256 before being written to persistent database storage.
• In-Memory Access Tokens: User access tokens are held exclusively in volatile memory during active sessions and are never written to unencrypted browser storage (localStorage or sessionStorage).
• Transport Layer Encryption: All communications between your browser, our API gateway, and external exchange endpoints are encrypted using TLS 1.3.
• Zero Custody Guarantee: We never request, collect, or store withdrawal permissions. Your funds always remain in your own exchange account.

4. Data Retention & Deletion Policy

We adhere to clear data lifecycle principles:

• Immediate Key Erasure on Revocation: When you disconnect or revoke an exchange API key in your dashboard (/dashboard/keys), the encrypted credential record is immediately and permanently deleted from our database, instantly terminating our system's ability to dispatch orders to your exchange account.
• Account Deletion: You may request full account closure and erasure of your personal data at any time by emailing [email protected]. Upon verified request, your profile and credentials will be permanently purged from active systems.
• Statutory Financial Records: Billing transaction records and compliance audit logs are retained for the statutory period required by applicable accounting, tax, and anti-financial crime laws in Nigeria, Kenya, and Ghana.

5. Cookies & Tracking Technologies

Tadex does not use third-party marketing or cross-site tracking cookies. We utilize strictly necessary first-party httpOnly cookies for silent session authentication and token refresh. These cookies are essential for the secure operation of the platform and cannot be disabled without preventing authenticated dashboard access.

6. Third-Party Service Providers

We do not sell, rent, or trade your personal information. We share data only with trusted third parties strictly necessary for operating the platform:

• Payment Processors: Flutterwave and Paystack for billing facilitation and webhook transaction verification.
• Exchange APIs: Bybit API for dispatching user-authorized orders and position monitoring.
• Cloud Infrastructure: Managed database and hosting providers operating under strict confidentiality and security agreements.

7. Your Data Rights (NDPR / Data Protection)

In accordance with the Nigeria Data Protection Regulation (NDPR) and applicable regional data protection laws, you have the right to request access to your data, rectify inaccuracies, request data erasure, or restrict processing. To exercise any of these rights, please contact our Data Protection Officer at [email protected].

8. Contact Us & Operating Address

If you have any questions, concerns, or feedback regarding this Privacy Policy or our security practices, please contact us at:

Voreza Technologies
Lagos, Nigeria
Email: [email protected]