Privacy & cookie policy

1. Who we are

HeroBotsAi (herobotsai.com) is run by [to be added], [to be added], Chamber of Commerce (KvK) number [to be added]. We are the controller of your personal data. Questions or requests: [to be added].

2. What we collect

Account: name, email address, country, a bcrypt hash of your password (never the password itself), or your Google or Apple sign-in details.

Trading: practice and real trades, settings, alerts and Autopilot choices. If you connect an exchange, its API keys are stored encrypted.

Payments: amount, method and status. Card and wallet details are handled by Stripe, PayPal or NOWPayments; we never see them.

Technical and security: IP address, browser type, failed sign-ins (kept 7 days) and blocked attacks on our AI (kept 90 days).

With your consent: analytics and advertising data (section 4).

3. Why we use it

To provide your account and trades (contract); to protect the platform against abuse and fraud (legitimate interest); for analytics and ads (consent); to keep payment records as tax law requires (legal obligation).

4. Cookies and similar technology

Always on (needed to work): the sign-in cookie gb_session (7 days), apple_nonce (5 minutes, Apple sign-in), googtrans (your language), and browser storage for text size, language and your cookie choice.

Analytics and ads (only with consent): Google Analytics (_ga), Google Ads (_gcl_*), Meta Pixel (_fbp, _fbc) and Microsoft Advertising (_uetsid, _uetvid).

Before you choose, Google and Microsoft receive only cookie-free signals without identifiers (consent mode); Meta receives nothing. You can change your choice at any time with the button below.

5. Who receives data

Hosting and delivery: Emergent, Google Cloud and Cloudflare. Sign-in: Google (via Emergent) and Apple. Payments: Stripe, PayPal, NOWPayments. Email: Emergent's email service. Phone and browser alerts: your browser's push service. Exchanges you connect yourself: Binance, Bybit, Coinbase or Kraken. Analytics and ads with consent: Google, Meta, Microsoft.

AI analysis (Anthropic, OpenAI, Google, xAI, Perplexity) receives market data only, never your name or email. We do not sell personal data.

6. Outside the EU

Some providers are based in the United States. Transfers rely on the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.

7. How long we keep it

Account data as long as your account exists; failed sign-ins 7 days; AI security records 90 days; payment records 7 years (Dutch tax law).

8. Your rights

You may ask to see, correct, delete or receive your data, limit or object to its use, and withdraw consent at any time. Email [to be added]. You may also complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or your local authority.

9. Security and age

We use HTTPS, hashed passwords, encrypted exchange keys, sign-in limits and an AI shield against manipulation. HeroBotsAi is for adults (18+).

10. Changes

We update this policy when the platform changes; the date above shows the latest version.