> ## Documentation Index > Fetch the complete documentation index at: https://docs.ansio.trade/llms.txt > Use this file to discover all available pages before exploring further. # Privacy Policy What ANSIO processes when you visit the site, connect an account or use Autopilot. ## 1. Who is responsible Privacy questions have an inbox. This notice describes personal-data processing for the ANSIO service. ANSIO is the service’s trading name. Contact [ops@ansio.trade](mailto:ops@ansio.trade) for privacy questions or requests. Effective date: 8 October 2026. For account administration, security and our own business records, we determine why and how personal data is used. Where a business customer instructs us to process personal data on its behalf, the respective roles and instructions must be covered by an appropriate data-processing agreement. An exchange, Telegram or another service you choose may separately control information it receives. ## 2. Information involved Useful context, not your life story. Depending on the features used, information may include account identifiers and contact details; authentication and session records; workspace memberships, roles and client labels; exchange credentials and connection settings; balances, orders, fills, positions, strategy settings and action history; Autopilot messages, proposals, approvals and results; Telegram identifiers and notification content; support messages and attachments; and technical records such as IP addresses, request times and errors. Billing information applies if you purchase a paid service. We receive information from you, authorised workspace users, connected venues and the systems that operate the service. Do not place unrelated personal information, secrets or sensitive information in client labels, prompts or support attachments. ## 3. Purposes and legal grounds Data needs a reason to be here. We process information needed to create accounts, provide requested connections and automation, and respond to service requests to perform our contract. For users acting on behalf of a business, relevant administration and security may instead rely on our legitimate interests in operating and protecting that business relationship. Fraud prevention, troubleshooting and service security rely on legitimate interests where appropriate, balanced against your rights. Mandatory accounting and lawful disclosure rely on legal obligations. Optional marketing or non-essential tracking requires an appropriate legal basis, including consent where required. If information essential to authentication or a requested connection is not provided, that feature may not work. Reading this notice is not blanket consent to every type of processing. ## 4. Autopilot and OpenAI Give OpenAI context. Keep your secrets. Autopilot uses the OpenAI API. Relevant prompts and selected account or trading context may be sent for processing to generate analysis or proposed actions. Context can include account labels, strategy settings, market information and trading state. Do not include passwords, API secrets or private keys in prompts. AI-generated trading outputs can be inaccurate. OpenAI processes API requests under the terms applicable to the service. Processing and retention can differ by endpoint and account configuration. This notice does not promise zero provider retention. You can ask us about the processing relevant to your use of Autopilot. ## 5. Who receives information A connected desk has a few neighbours. Information is made available as needed to authorised workspace members, connected exchanges, hosting and database providers, AI providers, communications services and support personnel. Professional advisers or public authorities may receive information where required by law or necessary for a lawful claim. A manager you authorise may see the information allowed by the assigned role. Infrastructure and integrations include Supabase for application services, website hosting infrastructure, OpenAI for AI features, Telegram where you use messaging features, and Google Fonts for website font delivery. Connected exchanges receive the API requests needed to operate your account. Contact us for information about providers relevant to a particular feature. Providers receive the information needed for their respective functions. ## 6. International processing Data does not carry a passport. Provider processing locations can differ from your location. Contact [ops@ansio.trade](mailto:ops@ansio.trade) for information on the recipients and safeguards relevant to your account. Where the GDPR applies, international transfers require an applicable legal mechanism, such as an adequacy decision or appropriate contractual safeguards. You can request information about the mechanism and a copy of applicable safeguards from [ops@ansio.trade](mailto:ops@ansio.trade). ## 7. Retention Forever is not a retention policy. Retention is limited to what is needed for the relevant purpose: an active account and service delivery, investigation of incidents, required accounting records, and the establishment or defence of legal claims. Deletion can be subject to a specific legal hold. Backup removal depends on the applicable backup lifecycle. You may request deletion or ask about the retention applicable to a particular record at [ops@ansio.trade](mailto:ops@ansio.trade). We assess the operational purpose, applicable legal obligations and any active dispute when handling the request. We do not promise immediate removal from every backup or independent exchange record. ## 8. Browser storage and external resources Your theme deserves a memory. The marketing site stores your selected colour theme in local storage and interactive demo progress in local or session storage. Dismissing the storage notice is remembered in local storage until you clear it. The landing page does not currently include analytics or advertising trackers. The application uses storage and authentication mechanisms needed for its features. The current site loads fonts from Google Fonts, which can expose technical connection data to that provider. The 404 game connects directly to Coinbase’s public BTC/USD feed when you open the page; Coinbase receives technical connection data such as your IP address. Game calls and scores stay in browser memory. The game does not send orders or account credentials. Browser settings allow you to clear local storage; doing so may reset preferences or sign you out. Necessary authentication and preference storage should be distinguished from optional analytics or advertising. If a feature introduces optional tracking that requires consent, it must offer a choice before activating that tracking. ## 9. Your rights Your data. Your questions. Subject to applicable conditions, you may request access, correction, deletion, restriction and portability, and object to processing based on legitimate interests. Where processing relies on consent, you may withdraw it without affecting prior lawful processing. Contact [ops@ansio.trade](mailto:ops@ansio.trade). We may ask for proportionate information to verify identity; do not send exchange secrets. Under the GDPR we normally respond within one month. Where permitted, complex or numerous requests may require up to two additional months; we will explain an extension within the first month. You may complain to the supervisory authority in your place of residence, work or the alleged infringement. If the operator is established in Spain, the relevant authority may be the [AEPD](https://www.aepd.es/). ## 10. Security, automated processing and updates Even good locks need attention. Exchange access and trading records require safeguards suited to their sensitivity. No online system can guarantee absolute security. Report suspected exposure immediately to [ops@ansio.trade](mailto:ops@ansio.trade) and revoke affected credentials directly at the venue. Trading automation operates on connected account data under the authority selected by users. You may ask us to explain the use of your personal data in automated processing and exercise any applicable rights, including rights concerning solely automated decisions with legal or similarly significant effects. Material changes to this notice will be communicated through suitable service channels. A revised notice does not create consent for a new purpose that requires it. This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.