Privacy Policy

Effective Date: June 5, 2026

Creationauts Inc. ("we", "us", or "our"), a corporation incorporated under the laws of Canada, operates the Crypto Broker application and website (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service, including the Crypto Broker desktop applications (macOS, Windows), mobile applications (iOS, Android), and the website at crypto-broker.app.

By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Service.

1. Information We Collect

1.1 Account Information

When you create an account, we collect:

  • Email address
  • Hashed password (we never store your password in plain text)
  • Account creation date

1.2 Device Information

To manage device activations and licensing, we collect:

  • A randomly generated device identifier (UUID)
  • Device name (e.g., "John's MacBook Pro")
  • Device type (desktop, mobile, tablet)
  • Operating system version (for bug reports only)

1.3 Exchange API Credentials

Crypto Broker requires cryptocurrency exchange API keys to function. These credentials are stored locally on your device using your operating system's secure storage (macOS Keychain, Windows Credential Manager, or equivalent). We never transmit, store, or have access to your exchange API keys on our servers.

1.4 Usage Data

We collect limited usage data to operate the Service:

  • Order count (to track free-tier usage limits)
  • License activation and deactivation events
  • Payment transaction references (processed by Stripe)

1.5 Camera Access

On mobile devices (iOS and Android), Crypto Broker requests access to your camera solely to scan QR codes for the device-sync feature, which allows you to securely pair a mobile device with your desktop installation over a local network. We do not capture, store, or transmit photos or video. Camera access is only activated when you explicitly initiate a QR code scan.

1.6 Support Communications

When you submit a contact form, bug report, or exchange request, we collect:

  • Your name and email address
  • The content of your message
  • System information (OS version, app version) for bug reports
  • IP address (for anti-abuse purposes)

1.7 Website Data

When you visit our website, we may collect standard server log information including IP address, browser type, and pages visited. We use Cloudflare Turnstile on certain forms to prevent abuse, which is subject to the Cloudflare Privacy Policy.

2. How We Use Your Information

We use the information collected to:

  • Provide, maintain, and improve the Service
  • Authenticate your account and manage device activations
  • Process payments and manage your license
  • Respond to support requests and bug reports
  • Send transactional emails (password resets, email verification, support replies)
  • Prevent fraud and abuse
  • Comply with legal obligations

We do not sell your personal information to third parties. We do not use your data for advertising or marketing purposes beyond essential service communications.

3. Third-Party Services

We use the following third-party services to operate Crypto Broker:

3.1 Stripe (Payment Processing)

Payments are processed by Stripe, Inc. We do not store your credit card information. All payment data is handled directly by Stripe in accordance with their Privacy Policy.

3.2 Cryptocurrency Exchanges

Crypto Broker connects directly to cryptocurrency exchange APIs using credentials stored locally on your device. All communication between the application and exchanges occurs directly from your device. We do not proxy, intercept, or log your trading activity.

3.3 Cloudflare Turnstile

Our website uses Cloudflare Turnstile to protect forms from automated abuse. Turnstile checks signals from your browser to distinguish people from bots. It does not track you across websites and is not used for advertising or profiling.

4. Data Storage and Security

Your account data is stored on secure servers. We implement industry-standard security measures including:

  • Encrypted connections (HTTPS/TLS) for all data in transit
  • Bcrypt password hashing with unique salts
  • Token-based authentication with secure expiration
  • Local-only storage of exchange API credentials using OS-level secure storage

While we take reasonable precautions, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

5. Data Retention

We retain your account data for as long as your account is active. Support tickets and communications are retained for a reasonable period to provide ongoing support and improve the Service. If you delete your account, we will remove your personal data within 30 days, except where retention is required by law.

6. Your Rights

In accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable privacy laws, you have the right to:

  • Access the personal information we hold about you
  • Request correction of inaccurate information
  • Request deletion of your account and personal data
  • Withdraw consent for data processing (which may limit your use of the Service)

To exercise any of these rights, please contact us at contact@crypto-broker.com.

7. Cookies

The Crypto Broker website uses essential cookies and local storage for authentication (storing your session token). We do not use tracking cookies, analytics cookies, or advertising cookies.

8. Children's Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will take steps to delete it promptly.

9. International Data Transfers

Our servers are located in North America. If you access the Service from outside Canada, your information may be transferred to and processed in Canada. By using the Service, you consent to such transfers.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Effective Date" above. Your continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions or concerns about this Privacy Policy, please contact us: