← Back to the app

Privacy Policy

This policy explains what AutobotSignal ("we") collects and why, for both the web app and the Android app. Both connect to the same service and are covered identically.

Who we are

AutobotSignal (autobotsignal.io), contact support@autobotsignal.io. We are an independent automated-trading tool. We are not Deriv, and Deriv is a separate company; the app trades on your own Deriv account.

What we collect

• Deriv authorization. When you log in with Deriv, we store the access token Deriv issues to our service so the bot can trade on your behalf while your device is off. If you sign in with a Deriv API token instead, we store that token for the same purpose. We never receive or store your Deriv password — you authenticate with Deriv directly.
• Your Deriv account IDs. The login IDs of your Deriv accounts (for example CR1234567 or VRTC1234567), so the bot trades the account you choose.
• Your bot configuration. Stake, strategy, selected markets, take-profit / stop-loss, and similar settings you enter.
• Your trade history. The trades the bot places on your account, stored so you can review them across devices.
• Telegram phone number and session (optional). Only if you connect a Telegram signal source: the phone number you enter is used to sign in to Telegram, and we store the resulting Telegram session for your account to read the channels you choose. Your Telegram login code and 2FA password are passed to Telegram to finish sign-in and are not saved. We show your Telegram username (or first name) so you can see which account is connected; it is read from Telegram and not stored. Disconnecting Telegram deletes this data.
• Push token (optional). Only if you enable notifications: the push endpoint your browser provides, or on Android the device token from Firebase Cloud Messaging (a Google service). It is used only to send you trade and signal alerts. Turning notifications off removes it.
• Profile photo (optional). Only if you add one: the picture you choose, cropped square and shrunk on your device (512×512) before it is sent. It is shown only to you, in your own app — never on the leaderboard or to anyone else. Removing it in the app deletes it from our server.

What we do NOT collect

We do not collect your Deriv password, your name (other than showing which Telegram account is connected, above), contacts, your photo library (only the one profile photo you choose, above), location, advertising identifiers, or device sensors. We do not use analytics or advertising SDKs, and we do not track you across other apps or websites.

How it is used

Solely to operate the service you asked for: run your bot, show your history and balance, deliver signals from the sources you connect, and send the notifications you enable. We do not sell or rent your data, and we do not share it with third parties except the services strictly required to function (Deriv, to place your trades; and — only if you enable them — Telegram and your push service: your browser's, or Google's Firebase Cloud Messaging on Android).

Storage & security

Data is stored on our server with access-restricted permissions and used only to run the service. Backups are kept private. Data travels over encrypted HTTPS/WSS connections.

Retention & your control

Logging out ends your session. Disconnecting Telegram deletes its session file; turning off notifications deletes your push subscription; removing your profile photo deletes it. To delete your stored data entirely — settings, history, and authorization — email support@autobotsignal.io and we will remove it.

Children

The service is not directed to anyone under the legal age for trading in their jurisdiction, and we do not knowingly collect their data.

Changes

We may update this policy; material changes will be reflected by the date above. Questions: support@autobotsignal.io.