Privacy Policy
This policy explains what personal data BOTLAB ("we") collects through botlab.org.uk, our hosted bots and our tools, why, and the choices you have. Contact: contact@botlab.org.uk.
1. Data we collect
- Account data: email address, display name, country you select, a salted password hash (PBKDF2-SHA256; we never store your password), two-factor authentication settings, and — if you sign in with Google — your Google account identifier and email.
- Exchange API keys you add for hosted bots: stored encrypted; they must be trade-only (no withdrawal permission). We use them only to run the bot you configured on your own exchange account. We never hold your funds.
- Orders and payments: plan, amount, payment network and blockchain transaction IDs (TXIDs) you submit, and referral/commission records.
- Bot and paper-trading data: settings, status, positions and trades of your hosted or paper bots.
- Messages: emails you send to contact@botlab.org.uk and live-chat messages on the site (the chat may be answered by an AI assistant).
- Technical data: IP address and country from our hosting provider, used for security, rate limiting and to enforce restricted jurisdictions; a session cookie (HttpOnly, Secure) to keep you signed in. We do not use advertising cookies or third-party analytics trackers.
- Files you check with our tools: the free "Check your bot" tool runs in your browser and does not upload your file. The Bot Log Auditor demo processes uploaded files in memory and does not store them.
2. How we use data
- To provide accounts, hosted bots, paper trading, payments and support.
- To secure the service (login protection, fraud and abuse prevention).
- To comply with law and our Service Agreement, including restricted jurisdictions.
- To send service emails (verification codes, receipts, replies). We do not sell personal data.
3. Service providers we share data with
- Cloudflare — hosting, database, security and the AI models used for chat and audits.
- Resend — delivery of emails we send.
- Google — optional "Sign in with Google".
- Your exchange (Bybit, Binance or Bitget) — only orders from bots you start, using your own API key.
- Public blockchain data services (e.g. TronGrid) — to verify payment transactions you report.
- Telegram — only if you connect a Telegram bot for notifications.
4. YouTube API Services
BOTLAB uses the YouTube Data API only to upload our own videos to our own YouTube channel (@botlabtrade). We do not access, collect or store data of YouTube users or viewers through the YouTube API. By watching our videos you are subject to the YouTube Terms of Service and the Google Privacy Policy. Authorisation granted to our tool can be revoked at Google security settings.
5. Retention
We keep account and order data while your account is active and as long as needed for accounting, legal and dispute purposes. Exchange API keys are deleted when you remove them or close your account. Chat and email messages are kept to provide support and may be deleted on request.
6. Your choices and rights
You can update or delete your API key at any time, and you can ask us to access, correct, export or delete your personal data by emailing contact@botlab.org.uk. Depending on where you live you may have additional rights under local law.
7. Security
Passwords are hashed, API secrets are encrypted, sessions use secure HttpOnly cookies, and changes to sensitive settings require your password and two-factor code. No system is perfectly secure; please use a trade-only API key restricted to our server IP.
8. Children
The service is not intended for anyone under 18.
9. Changes
We will update this page when our practices change and show the date above.
Check your bot free