Privacy Policy — CapitalView
Legal

Privacy Policy

Effective date: June 1, 2025  ·  Last updated: June 1, 2025

We take your privacy seriously. CapitalView uses exchange API keys with read-only permissions, stores them encrypted, and never shares them with third parties.

1. General Provisions

This Privacy Policy (the "Policy") describes how CapitalView (the "Service", "we", "us") collects, uses, stores, and protects the personal data of users of the CapitalView Telegram Mini App (the "App"), available via the bot @CapitalViewAppBot on Telegram, and through the website capitalview.tech.

By using the App, you agree to the terms of this Policy. If you do not agree, please discontinue use of the Service.

This Policy applies to all users of the App regardless of country of residence.

2. Data Controller

The data controller is the CapitalView development team. For any questions related to the processing of your personal data, please contact us via:

3. Data We Collect

3.1. Data from Telegram

When you launch the App through Telegram, we automatically receive the following data from the platform:

  • Telegram user ID (numeric identifier)
  • First name and/or username, if set in your Telegram profile
  • Interface language code

We do not have access to your phone number, messages, or contacts.

3.2. Portfolio Data

To use the core features, you provide:

  • API keys for connected exchanges (read-only permissions only)
  • Manually entered trade data (asset ticker, quantity, entry price, date)
  • Notification settings per asset (price change thresholds)

3.3. Technical Data

During normal use, the following is collected automatically:

  • Device information (device type, OS version, Telegram client version)
  • Technical logs for error diagnostics (not linked to personal data)
  • Information about features used within the App (usage analytics)

4. Purposes and Legal Bases for Processing

Purpose Data Legal basis
User identification and access to the Service Telegram ID, name Contract performance (consent)
Exchange data synchronisation API keys Contract performance (consent)
Portfolio and P&L display Trade data, settings Contract performance
Sending push notifications on price changes Telegram ID, notification settings User consent
Service improvement and error diagnostics Technical logs Legitimate interest
Abuse prevention Technical data Legitimate interest

5. Data Storage and Security

5.1. API Key Storage

Exchange API keys are stored in encrypted form using modern cryptographic algorithms. We only accept read-only keys — they cannot be used to place trades, withdraw funds, or modify exchange account settings.

5.2. Infrastructure

Data is stored on secured servers with restricted access. Data transmission between your device and our servers is protected by HTTPS/TLS.

5.3. Retention Periods

  • Account and portfolio data — until the user deletes their account
  • Technical logs — no more than 90 days
  • After account deletion, all data is permanently erased within 15 days

6. Sharing Data with Third Parties

We do not sell, rent, or transfer your personal data to third parties for commercial purposes.

Limited data sharing may occur only in the following cases:

  • Exchanges (Bybit, etc.) — API requests to exchanges are made on behalf of the user using their provided keys. Only the keys are used — no additional personal data is transferred.
  • Cloud infrastructure providers — servers and databases for data storage and processing, operating under Data Processing Agreements (DPA).
  • Telegram — push notifications are sent via the Telegram Bot API. Telegram processes data in accordance with its own Privacy Policy.
  • Law enforcement — when required by a lawful order under applicable legislation.

7. Your Rights

You have the right at any time to:

  • Access the personal data we process about you
  • Correct inaccurate or outdated data
  • Delete your data ("right to erasure")
  • Restrict the processing of your data
  • Withdraw consent to data processing (without affecting the lawfulness of processing prior to withdrawal)
  • Disconnect exchange API keys — via App settings at any time
  • Unsubscribe from notifications — via notification settings in the App

To exercise your rights, please contact our support team via the Telegram community or reach out to us directly.

8. Minors

CapitalView is not intended for persons under 18 years of age. We do not knowingly collect data from minors. If you become aware that a minor has provided us with their data, please contact us for its deletion.

9. International Data Transfers

Servers may be located in different countries. When data is transferred outside your country of residence, we ensure an adequate level of protection in accordance with applicable law (standard contractual clauses, adequacy decisions, etc.).

10. Changes to This Policy

We reserve the right to update this Policy unilaterally. The updated version of the Policy is available at capitalview.tech/privacy and takes effect from the moment it is published, unless a different effective date is specified.

Continued use of the App after changes are published constitutes your acceptance of the updated Policy.

11. Contact Us

For any questions related to the processing of personal data, please contact us:

We aim to respond to all requests within 5 business days.

Made on
Tilda