Skip to main content

Privacy Policy

Sigma Engine LTD — British Virgin Islands

Last updated: March 5, 2026

This Privacy Policy describes how Sigma Engine LTD ("Sigma Engine", "we", "us", or "our") collects, uses, and protects information when you use the Sigma Engine platform ("Platform").

1. Information We Collect​

Information You Provide​

  • Wallet address — Your public blockchain address, used for authentication and account identification.
  • Exchange credentials — API keys, session tokens, wallet private keys (for exchanges requiring them), or linked signer authorizations. These are encrypted at rest and used solely to execute trades on your behalf.
  • Trading settings — Bot configurations, strategy preferences, risk parameters, and mode selections.

Trading Data We Record​

When you use bots on the Platform, we collect and store:

  • Trade entries and exits — Order side, price, size, timestamp, and exchange for every order placed through the Platform.
  • Positions — Open position data including direction, size, entry price, unrealized PnL, and liquidation price.
  • Profit and loss (PnL) — Realized and unrealized PnL per trade, per session, and cumulative.
  • Trading volume — Total volume executed per user, per exchange, per market, and per time period.
  • Order history — Full history of orders placed, filled, cancelled, or rejected.
  • Bot activity logs — Bot start/stop events, strategy mode, runtime duration, and performance metrics.
  • Fill data — Execution prices, slippage, fees paid, and maker/taker classification.

Information Collected Automatically​

  • IP address — Collected on every login and API request. Used for security, fraud prevention, rate limiting, and access control.
  • Device fingerprint — Browser fingerprint data collected for fraud prevention and device identification.
  • Device information — Browser type, operating system, screen resolution, and language settings.
  • Usage data — Pages visited, features used, buttons clicked, and interaction patterns.
  • Session data — Login timestamps, session duration, and authentication events.
  • Error and performance data — Error logs, stack traces, and performance metrics to maintain Platform stability.

Information We Do NOT Collect​

  • We do not collect your name, email address, phone number, or physical address.
  • We do not collect or store your wallet private keys used for authentication. Login is performed via cryptographic signature verification. (Note: some exchanges require a wallet private key for trading sessions — these are encrypted and stored separately from authentication credentials.)
  • We do not track your activity outside of the Platform.

2. How We Use Your Information​

We use collected information to:

  • Authenticate your identity via wallet signature verification.
  • Execute trades on third-party exchanges as directed by your bot configurations.
  • Track performance — Record and display your trading history, PnL, and portfolio metrics.
  • Calculate fees — Determine fee tier based on trading volume and apply applicable charges.
  • Enforce rate limits — Prevent abuse and ensure fair platform usage.
  • Detect fraud — Identify suspicious activity, unauthorized access, and potential abuse using IP addresses, device fingerprints, and behavioral patterns.
  • Monitor platform health — Diagnose technical issues and maintain uptime.
  • Improve the Platform — Analyze usage patterns to enhance features and user experience.
  • Generate leaderboards — Aggregate anonymized performance data for public leaderboard display.
  • Enforce Terms of Service — Investigate violations and take appropriate action.

3. Data Storage and Security​

  • All exchange credentials are encrypted using AES-128-CBC (Fernet) encryption at rest.
  • Each user's credentials and trading data are isolated — no user can access another user's data.
  • JWT authentication tokens expire after 24 hours and require wallet signature renewal.
  • The Platform uses HTTPS/TLS for all communications.
  • Access to production infrastructure is restricted, key-authenticated, and monitored.
  • Trading data is stored in encrypted databases with access controls.

We implement reasonable technical and organizational measures to protect your data. However, no system is completely secure, and we cannot guarantee absolute security.

4. Third-Party Services​

The Platform integrates with the following categories of third-party services:

  • Decentralized exchanges — To execute trades on your behalf using credentials you provide. Your trading activity on these exchanges is subject to their own privacy policies.
  • Error monitoring and session replay — To track, diagnose, and resolve software errors. May capture anonymized session recordings with sensitive inputs masked.
  • Analytics and observability — To understand Platform usage patterns, monitor performance, and improve reliability.
  • Fraud prevention — Device fingerprinting services to detect and prevent unauthorized access.

We do not sell, rent, or share your personal information with third parties for marketing or advertising purposes.

5. Data Retention​

  • Trading data (trades, PnL, volume, order history) — Retained indefinitely for the duration of your account and for a reasonable period after account closure for compliance, dispute resolution, and audit purposes.
  • Exchange credentials — Retained while your exchange connections are active. Disconnecting an exchange removes stored credentials.
  • IP addresses and login history — Retained for up to 24 months for security and fraud prevention.
  • Device fingerprints — Retained for up to 12 months.
  • Usage and performance data — Retained for up to 12 months for analysis and Platform improvement.
  • Error logs — Retained for up to 6 months.

6. Data Sharing​

We may share your data in the following limited circumstances:

  • With third-party exchanges — Only the credentials and order data necessary to execute your trades.
  • Aggregated and anonymized data — We may publish aggregated, non-identifiable statistics (e.g., total platform volume, leaderboard rankings) that cannot be traced back to individual users.
  • Legal compliance — If required by law, regulation, legal process, or governmental request, we may disclose your information to the extent necessary to comply.
  • Protection of rights — To enforce our Terms of Service, protect against fraud, or defend our legal rights.

We will never sell your trading data, PnL history, or personal information to third parties.

7. Your Rights​

You may:

  • Disconnect exchanges — Remove stored credentials at any time through the Platform.
  • Request data export — Request a copy of the trading data and account information we hold about you.
  • Request data deletion — Contact us to request deletion of your account and associated data, subject to any legal retention requirements.

Note that certain data (e.g., blockchain transactions, trade history on third-party exchanges) cannot be deleted as it exists on public blockchains or third-party systems outside our control. Aggregated or anonymized data that has already been published (e.g., leaderboard entries) may not be retroactively removed.

8. Cookies and Local Storage​

The Platform uses browser local storage for:

  • Authentication tokens (JWT).
  • User preferences and settings.
  • Session state and admin credentials.
  • Device identification data.

We do not use tracking cookies for advertising. Any analytics or monitoring tools are used solely for Platform operation and improvement.

9. Children​

The Platform is not intended for use by individuals under 18 years of age. We do not knowingly collect information from children. If we become aware that we have collected data from a minor, we will take steps to delete it.

10. International Data​

By using the Platform, you consent to the transfer and processing of your information in jurisdictions where Sigma Engine or its infrastructure providers operate. This may include jurisdictions with data protection standards that differ from your home jurisdiction.

11. Changes to This Policy​

We may update this Privacy Policy from time to time. Material changes will be communicated through the Platform. Continued use of the Platform after changes are posted constitutes acceptance of the updated policy.

12. Contact​

For privacy-related inquiries, contact us through the Platform's official communication channels.

By using Sigma Engine, you acknowledge that you have read and understood this Privacy Policy.