Privacy Policy
This policy explains what personal data Arco ("Arco", "we", "us") collects when you use arco.so, how we use it and what choices you have.
1. Data we collect
- Account data: your email address and password (we store only a hash of the password, never the password itself). If you sign in with Google, we receive your email address, Google account ID and profile picture.
- Security data: whether two-factor authentication is on, and its secret key (stored encrypted); login times.
- Wallet and trading data: your wallet addresses, balances, positions, orders, copy-trading settings, deposits, withdrawals, and fee and referral records.
- Telegram: if you connect our Telegram bot, your Telegram chat ID and username.
- Referral data: your referral code and who referred you.
- Technical data: your IP address, browser type and the pages you request, recorded in our server logs.
- Support: the messages you send us and our replies.
We do not collect identity documents or bank card details. Deposits are made in cryptocurrency.
2. How we use your data
- to create and run your account and wallets, copy trades, calculate and collect fees, and process withdrawals;
- to keep accounts secure and prevent fraud and abuse — for example, when reviewing withdrawal requests or blocking suspicious logins;
- to send you notifications you have chosen (Telegram) and service emails (for example, password reset);
- to answer your support requests;
- to fix problems and improve the service;
- to comply with legal obligations.
We do not sell your personal data and do not use it for advertising.
5. Public blockchain data
Wallet addresses, balances and transactions on Hyperliquid and Arbitrum are public and permanent by design. Anyone can see them, and neither we nor anyone else can delete them.
6. How long we keep data
We keep account data while your account exists. After the account is closed, we keep records of transactions, fees and withdrawals for as long as needed for accounting, dispute resolution and fraud prevention, and delete or anonymize the rest. Server logs are kept for a few weeks. Database backups are rotated and kept for a limited time.
7. Security
We protect data with encrypted connections (HTTPS), password hashing, encryption of two-factor secrets and trading keys (AES-256), and restricted access to our servers. No system is completely secure, so we cannot guarantee absolute security.
8. Your rights
You can ask us to give you a copy of your data, correct it, delete it or stop a particular use of it. Email help@arco.so from the address linked to your account. We will reply within 30 days. We may keep data that we must retain under section 6 or by law.
9. International transfers
Our servers and the providers listed above may be located in different countries. By using Arco, you understand that your data may be processed outside the country where you live.
10. Children
Arco is not intended for anyone under 18, and we do not knowingly collect data from children.
11. Changes to this policy
We may update this policy. The date at the top shows when it was last changed. For material changes we will give notice on the website or by email.
12. Contact
Questions about privacy: help@arco.so. See also our Terms of Service.