Last updated 24 August 2026
1. Data AltPilot processes
- Identity and access data: email address, verification status, session records, passkey public credentials, and security-event timestamps.
- Exchange data: encrypted API credentials, credential permissions, exchange account identifiers, balances, positions, orders, and fills.
- Subscription and billing data: packages, plans, allocations, realized P/L attribution, high-water marks, invoices, service credits, referrals, and payment transactions.
- Blockchain data: invoice payment addresses, public transaction hashes, token transfers, confirmations, and payment-price evidence.
- Technical data: IP address, request metadata, audit events, and diagnostic information needed to secure and support the service.
2. Why it is processed
AltPilot uses this data to provide and secure authentication; verify trade-only permissions; size, place, cancel, and reconcile orders; synchronize balances and positions; calculate invoices and referral amounts; detect payments and reorgs; prevent duplicate actions and abuse; respond to support and disputes; and meet accounting, security, and legal obligations.
3. Credentials and passkeys
Exchange credentials are encrypted and used only to provide the exchange connection you authorize. They are not returned in full after they are saved or included in application logs. Passkey private keys remain in your authenticator; AltPilot stores only the public information needed to verify a sign-in.
4. Service providers and external systems
Data is disclosed only as needed to operate the service: the email provider receives the address and verification message needed for delivery; the connected exchange receives authorized trading requests; blockchain providers process public payment queries and transactions; and infrastructure providers support hosting, monitoring, and security. Public blockchain transactions are inherently visible and cannot be made private by AltPilot.
5. Cookies and local storage
AltPilot uses a Secure, HttpOnly, SameSite session cookie to keep you signed in. It is required for authenticated use and is not an advertising cookie. Local device storage may retain interface preferences and a referral invitation until account creation. Denial of that storage does not create substitute account data.
6. Retention
Security requests and sessions expire according to their configured lifetimes. Active account, exchange, and subscription records are kept while needed to provide the service. Orders, invoices, accounting history, blockchain transactions, security audits, and related evidence may be retained longer for accounting, fraud prevention, disputes, and legal duties. Exchange credentials are removed when the connection is deleted, subject to security and legal retention requirements.
7. Security
AltPilot uses access controls, encrypted credentials, protected sessions, additional verification for sensitive actions, audit records, and monitoring to reduce unauthorized access and misuse. No internet service or external exchange can be guaranteed completely secure.
8. Your choices and requests
You can review account, exchange, subscription, order, invoice, credit, and transaction records in AltPilot; revoke exchange access at the exchange; enroll or remove passkeys; and stop future subscriptions. Requests to access, correct, export, restrict, object to, or delete personal data may be sent from the verified email to info@axxra.in. Some records cannot be deleted while required for open positions, invoices, security, accounting, disputes, or law.
9. Children and changes
AltPilot is not intended for anyone who cannot legally hold and trade through the connected exchange. This notice may be updated when processing or providers materially change; the effective date above will be revised and material changes will be communicated through the account or verified email where practical.