Privacy Policy

1. Scope & who we are

This Privacy Policy explains how [ENTITY NAME] ("TradingTone.ai", "we", "us") collects, uses, discloses, and protects information in connection with the TradingTone.ai website (tradingtone.ai) and the TradingTone platform (app.tradingtone.ai), together the "Service". We are based and operate out of Japan.

TradingTone.ai is a non-custodial copy-trading service built on Hyperliquid. We never take custody of, control, or hold withdrawal rights over your funds — your assets stay in your own Hyperliquid account at all times. This policy covers the personal information we handle to run the Service; it does not cover your on-chain activity itself, which is public by the nature of the blockchain.

2. What we collect, and why

We collect the minimum needed to operate a copy-trading service safely and to meet our legal obligations. Specifically:

Category	What it is	Why we collect it
Account credentials	Email address and a hashed (never plaintext) password	To create and secure your account, and to let you sign in
Sign-in identity (optional)	If you choose "Sign in with Google", a Google account identifier	To offer a faster, password-free sign-in option
Verification & recovery	Email confirmation status; one-time, hashed tokens used for confirming your email or resetting your password	To confirm you control the email address on your account and to let you recover access securely. The token itself is never stored — only a one-way hash of it
Compliance information	KYC tier and country	To meet identity-verification and anti-money-laundering obligations that apply to a financial service
Wallet address	The EVM (Hyperliquid) wallet address you bind to your account	To know which on-chain account is yours so trades can be attributed and copied correctly. We never see or store your private key
Exchange API keys	API keys you provide for connected exchanges, stored encrypted at rest	To read your account state and place trades on your behalf, strictly within the permissions the key grants
Copy-trading configuration	Your sizing, capacity, take-profit/stop-loss, and which trader(s) you follow	To run copy trading the way you configured it
Trading activity	Orders placed on your behalf and their outcomes	To execute your copy-trading configuration, show you your own history, and investigate a support issue if something looks wrong
Session data	A sign-in session token	To keep you signed in securely between visits
Fee-credit balance	A ledger of fee credits, if any are issued to your account	To track and apply credits against fees. Fee credits are not a token, are not tradeable, and have no value outside reducing your fees on the Service
Technical & usage data	Standard web request data (e.g. IP address, browser type) when you use the site or platform	Security, fraud prevention, and diagnosing problems

We do not collect a token, and holding or earning fee credits does not make you an owner of anything. There is no TradingTone token.

3. Legal basis for processing

Where applicable data-protection law requires a stated legal basis, we rely on:

• Performance of a contract — to create your account, run copy trading as you configured it, and provide the Service you signed up for.
• Legal obligation — to meet KYC/AML and financial recordkeeping requirements that apply to a service like ours.
• Legitimate interests — to keep the Service secure, prevent fraud and abuse, and improve reliability, balanced against your rights.
• Consent — for optional features such as Google sign-in, and for any marketing email, which you can withdraw at any time.

4. Cookies & local storage

The public marketing site (tradingtone.ai) does not set tracking or advertising cookies. It uses your browser's localStorage only as a fallback save-point for the waitlist form, so a submission is not lost if our server is briefly unreachable — this stays on your device and is not a tracking mechanism. The platform (app.tradingtone.ai) uses a session token to keep you signed in; this is strictly necessary for the Service to function and is not used for advertising or cross-site tracking.

5. Who we share it with

We do not sell your personal information. We share it only where necessary to run the Service:

• Brevo — our transactional email provider, used to send account, verification, and password-reset emails.
• Google Cloud Platform — our infrastructure and hosting provider, which stores and processes data on our behalf under its own security commitments.
• Google — only if you choose "Sign in with Google", to authenticate you.
• Hyperliquid — the trading venue itself. Any order we place on your behalf is submitted to Hyperliquid and is visible on-chain, as is inherent to how the venue works. Hyperliquid is not controlled by us and has its own terms and privacy practices.
• Regulators & authorities — where required by law, court order, or a valid regulatory request.
• Successors — if we're involved in a merger, acquisition, or asset sale, as part of that transaction, subject to this policy's protections continuing to apply.

6. International transfer

We operate from Japan and use service providers (including Google Cloud Platform and Brevo) whose infrastructure may be located outside Japan. Where we transfer personal information internationally, we take reasonable steps to ensure it continues to receive an appropriate level of protection, consistent with applicable law.

7. How long we keep it

We keep personal information for as long as your account is active, plus a reasonable period afterward to meet legal, tax, AML, and dispute-resolution obligations, or until you request deletion under Section 9 and we have no overriding obligation to retain it. Encrypted exchange API keys and wallet bindings are deleted or rendered unusable when you disconnect them or close your account, subject to the same legal-retention limits.

8. Security

Exchange API keys and comparable trading credentials are encrypted at rest. Passwords are never stored in plaintext — only a one-way hash. Access to production systems is restricted and audited. No method of storage or transmission is 100% secure, and we cannot guarantee absolute security.

9. Your rights

Depending on where you live, you may have the right to:

• Access a copy of the personal information we hold about you.
• Correct inaccurate or incomplete information.
• Delete your personal information, subject to our legal, tax, and AML retention obligations.
• Export your data in a portable format.
• Object to or restrict certain processing, and withdraw consent where processing is based on consent.

To exercise any of these rights, contact us using the details in Section 12. We will respond within the timeframe required by applicable law.

10. Children

The Service is not directed to, and is not intended for use by, anyone under the age of 18. We do not knowingly collect personal information from children.

11. Changes to this policy

We may update this policy from time to time. If we make material changes, we will update the "Last updated" date above and, where appropriate, notify you directly. Continued use of the Service after a change takes effect means you accept the updated policy.

12. Contact us