Privacy Policy
Last updated: June 27, 2026
This Privacy Policy describes how Catalyst ("Catalyst", "we", "us", or "our") collects, uses, and discloses your information when you use our service, and the rights you have over your data.
Catalyst is an educational, news-driven crypto trading platform. It reads market headlines, scores them, and trades by strict risk rules — in a paper-mode simulation by default. By using the Service, you agree to the collection and use of information in accordance with this policy.
Interpretation and Definitions
Interpretation
Words with a capitalized initial letter have meanings defined below. The definitions apply whether the terms appear in singular or plural.
Definitions
For the purposes of this Privacy Policy:
- •Account means a unique account created for you to access the Service.
- •Application / Service refers to Catalyst, the trading-bot software and dashboard.
- •Company ("we", "us", "our") refers to Catalyst.
- •Cookies are small files placed on your device that store information about your browsing.
- •Exchange API Key is a credential you supply to let the Service place trades on your behalf on a connected exchange (e.g. Binance). It is never your exchange password.
- •Paper Mode is a risk-free simulation that uses virtual balances and real market prices — no real money is involved.
- •Personal Data is any information relating to an identified or identifiable individual.
- •Trading Data refers to your watchlist, bot configuration, generated signals, simulated or live trades, and equity history.
- •Service Provider means any third party that processes data on our behalf (see "Third-Party Services" below).
- •Usage Data refers to data collected automatically, generated by your use of the Service or its infrastructure.
- •You means the individual or entity accessing or using the Service.
Collecting and Using Your Personal Data
Account Information
While using the Service, we may ask you to provide:
- •Email address
- •Name
- •Profile photo and email, if you choose to sign in with Google (optional)
- •Payment information, if you subscribe to a paid plan (handled by our payment processor — we never see or store your card details)
Exchange API Keys
If you connect an exchange to enable live trading, we store the API key you supply so the bot can place orders within the permissions that key grants. We recommend trade-only keys with withdrawals disabled. We never store your exchange password.
Trading Data & Configuration
We store the settings and activity needed to run the bot: your watchlist, risk settings, mode (paper/live), generated signals, trades (simulated or real), and equity snapshots.
Usage Data
Collected automatically when you use the Service. This may include your device's IP address, browser type, pages visited, time and date of visits, features used, and other diagnostic data.
How We Use Your Personal Data
We may use your data to:
- •Operate the Service: run the trading engine on your behalf, fetch news and prices, score signals, and execute (or simulate) trades.
- •Score the news: send headlines and summaries to our LLM provider (DeepSeek) to judge materiality and direction.
- •Manage your account: registration, subscription status, and preferences.
- •Contact you: service updates, security alerts, and important notices.
- •Improve the product: analyze usage trends and diagnose issues.
- •Prevent abuse: enforce rate limits and our Acceptable Use Policy.
Third-Party Services
Catalyst integrates with the following third parties, each governed by its own privacy policy:
- •DeepSeek (LLM): news headlines and summaries are sent to DeepSeek's API to score sentiment and direction. We do not send your account identity with these requests.
- •Exchanges (e.g. Binance / Binance Testnet): when you connect an exchange, market data is read and orders are placed using the API key you supply.
- •News & market-data providers: we retrieve headlines from sources such as CoinDesk, The Block, CoinTelegraph, Decrypt, and the GDELT project. Following a headline link takes you to that provider's own site, governed by their terms.
- •Supabase: our managed PostgreSQL database and authentication provider.
- •Cloudflare: hosting, CDN, and network security for the dashboard and API.
Exchange API Keys & Security
- •API keys are encrypted at rest and never displayed back to you or written to logs.
- •We strongly recommend trade-only permissions with withdrawals disabled.
- •New accounts default to Paper Mode and Binance Testnet — no real funds are at risk until you deliberately switch to live trading.
- •You can remove a connected key at any time, which immediately stops the bot from placing live orders.
Where Your Data Lives
- •Our servers: account information, exchange API keys, trading configuration, signals, trades, and equity history are stored in our PostgreSQL database (Supabase), encrypted in transit and at rest.
- •Your browser (local storage): UI preferences, onboarding state, and demo data live locally on your device and never leave it unless you use account sync.
Retention of Your Personal Data
We retain your Personal Data only as long as necessary for the purposes in this policy, or as required by law. When you delete your account, we delete your server-stored data (including exchange API keys) within 30 days, except where retention is legally required. Browser local-storage data remains on your device and can be cleared by you at any time.
Delete Your Personal Data
You have the right to delete the Personal Data we hold about you. You can:
- •Remove a connected exchange key from Settings to stop live trading and delete the stored key
- •Clear your browser's local storage to remove all local preferences and demo data
- •Delete your account to remove all server-stored data
- •Contact us at privacy@catalyst.trade for a full export or deletion request
Security of Your Personal Data
We implement the following measures to protect your data:
- •Encryption of all data in transit using TLS/SSL
- •Encryption of data at rest in our database
- •Encrypted storage of exchange API keys, never exposed to the browser or logs
- •Token-based authentication and admin-guarded control endpoints
- •Our LLM and exchange credentials are held server-side only
However, no method of transmission or storage is 100% secure. While we strive to protect your data with commercially acceptable means, we cannot guarantee absolute security.
Children's Privacy
Catalyst is not directed to, and we do not knowingly collect data from, anyone under 18. Crypto trading is restricted to adults; if you believe a minor has provided us data, please contact us so we can remove it.
Your Rights Under GDPR (EU Users)
If you reside in the European Economic Area, you have the right to:
- •Access: request copies of your personal data.
- •Rectification: request correction of inaccurate data.
- •Erasure: request deletion of your data.
- •Restrict processing: request that we limit how we process your data.
- •Data portability: request transfer of your data to another organization.
- •Object: object to our processing of your data.
To exercise any of these rights, contact us at privacy@catalyst.trade.
Links to Other Websites
The Service contains links to third-party sites, including the news providers whose headlines we display. Following a link opens that provider's own site in a new tab. We have no control over and assume no responsibility for the content or privacy practices of any third-party site, and we advise you to review their policies.
Changes to this Privacy Policy
We may update this policy from time to time. We will post the new policy on this page, update the "Last updated" date, and, for material changes, notify you via email or a prominent notice. Changes are effective when posted.
Contact Us
If you have questions about this Privacy Policy, you can contact us:
- •By email: privacy@catalyst.trade
© 2026 Catalyst. All rights reserved. Catalyst is an educational tool — not financial advice.