Privacy Policy
Botlyz builds non-custodial trading software: you configure, sign and deploy your strategies yourself, and your funds never leave your wallet. We apply data minimization: we only collect what is strictly necessary.
1. Data controller
The data controller is Botlyz, the software publisher.
For any question about your data or to exercise your rights: Telegram @botlyz_manager.
2. What data we process
App (botlyz.com/app). Your identity is your public Ethereum address (sign-in with wallet, SIWE). We also process your preferences (language, strategies, likes), your signed configurations (EIP-712), and your Lighter "trade-only" API key, encrypted at rest. No email, no password. If you use the Botlyz Builder AI assistant, we also process the content of your conversations (see section 11). The app's internal audience measurement is anonymous and first-party (a random identifier stored locally, no third-party cookie).
Marketing site (botlyz.com). If you consent, audience measurement via Google Analytics (cookies) helps us understand traffic. No measurement cookie is set without your agreement.
3. Purposes and legal bases (GDPR, art. 6)
| Purpose | Legal basis |
|---|---|
| Providing and running the software (login, strategies, integration fee) | Performance of the contract |
| Security, abuse prevention, proper operation | Legitimate interest |
| Marketing-site audience measurement (Google Analytics) | Consent |
| Providing the AI assistant (Botlyz Builder AI) and improving the service (anonymized analysis of conversations) | Performance of the contract / Legitimate interest |
4. Cookies and trackers
| Name | Purpose | Set by | Duration | Consent |
|---|---|---|---|---|
| _ga, _ga_ZRY7BPM7MM | Audience measurement | Google Analytics | up to 13 months | Required |
| blz_consent | Stores your consent choice | Botlyz (local) | ~6 months | Exempt |
| blz_vid, blz_beacon | App's anonymous first-party audience measurement | Botlyz (local, first-party) | ~12 months | Exempt |
Google Analytics cookies are set only after you accept via the banner (Consent Mode v2). You can change your choice at any time below, or by clearing the site data in your browser.
5. Recipients and transfers outside the EU
Google (Google Ireland Ltd / Google LLC), for audience measurement, only if you consent. Data may be transferred outside the European Union (United States), framed by the Standard Contractual Clauses and the EU-US Data Privacy Framework.
Lighter (the DEX): you interact directly with Lighter through your API key; Lighter applies its own privacy policy.
OpenAI (OpenAI, L.L.C.), our processor for the AI assistant: if you use Botlyz Builder AI, your messages are sent to it to generate responses. Possible transfer outside the EU (United States), framed by the Standard Contractual Clauses.
We do not sell or rent your data.
6. Retention
- Account data (wallet, preferences, configurations): as long as your account is active, then deleted or anonymized.
- API key: deleted as soon as you delete the associated Lighter account.
- Google Analytics: 13 months maximum.
- Consent: stored for about 6 months, then asked again.
7. Your rights
Under the GDPR, you have the rights of access, rectification, erasure, restriction, portability, objection, and the right to withdraw consent at any time. To exercise them, contact us (section 1). Your Ethereum address serves as your identifier.
8. Complaint
You may lodge a complaint with the CNIL (the French data protection authority): www.cnil.fr.
9. Security
Encrypted connections (HTTPS), API keys encrypted at rest and never shown in clear, restricted access. No method is infallible, but we limit the surface: we never hold your funds, and the key you entrust allows no withdrawal.
10. Changes
This policy may change; the update date at the top prevails. We will inform you of significant changes.
11. AI assistant (Botlyz Builder AI)
Nature and limits. Botlyz Builder AI is an assistant based on an artificial-intelligence model. Its answers are generated automatically and may contain errors, inaccuracies or made-up information ("hallucinations"). They do not constitute investment advice, a buy or sell recommendation, or a market prediction in any way. You remain solely responsible for verifying, backtesting and deciding. Trading carries a significant risk of capital loss.
Data processed. To generate its answers, the content of your messages is sent to our processor OpenAI (section 5) and stored server-side. Your conversations may be analyzed and used in anonymized and/or aggregated form, for statistical purposes and to improve the service (answer quality, usage monitoring, abuse prevention). They are neither sold nor rented.
Legal basis. Providing the service (performance of the contract); improvement, security and abuse prevention (legitimate interest). You can exercise your rights over this data by contacting us (section 1).
See also: Terms of Sale · Terms of Use.