Privacy Policy

1. Who we are

Tarzan SwingBot ("we", "us") is the responsible party for the personal information processed through this service, in terms of the Protection of Personal Information Act, 2013 (POPIA).

2. Information we collect

• Account information: name, email address, phone number.
• Authentication data: hashed passwords, TOTP secrets.
• Trading configuration: VALR API credentials (encrypted at rest), strategy settings.
• Operational data: trade history, bot logs, P&L records.
• Technical data: IP address, browser, device, timestamps.

3. How we use your information

• To operate the trading engine on your behalf.
• To authenticate you and secure your account.
• To communicate service notices and respond to support requests.
• To comply with legal obligations.

4. Sharing

We do not sell personal information. We share data only with: (a) sub-processors that host our infrastructure, (b) the VALR exchange to execute trades, and (c) authorities where legally required.

5. Security

API credentials and TOTP secrets are encrypted at rest. Access requires two-factor authentication. We apply row-level security and least-privilege controls.

6. Retention

We retain personal information for as long as your account is active and as required by applicable law, after which it is deleted or anonymised.

7. Your rights

Under POPIA you may access, correct, or delete your personal information, and object to processing. To exercise these rights, contact hello@tarzanswingbot.ai.

8. Cookies

We use only essential cookies required for authentication and session management.

9. Updates

We may update this policy from time to time. Material changes will be notified via the email on file.