Last updated: September 2, 2026
This Privacy Policy explains what information Vectixs ("we", "us", "our") collects when you use our trading dashboard (the "Service"), how we use it, and the choices you have. It should be read alongside our Terms of Service.
| Category | What it includes |
|---|---|
| Account information | Username, password (stored as a salted hash, never in plain text), and any profile details you add (e.g. an uploaded avatar image). |
| Email address | Required at signup, used for account verification, password recovery, and security/billing alerts. Verifying it (clicking the link we email you) is required before you can enable real-money trading. You can view, change, or add this from your profile page at any time. |
| Exchange API credentials | The API key and secret you provide for each exchange you connect (WOO X, Binance, Bitfinex, Bitkub, Binance TH). Stored encrypted at rest and used only to place/query orders and read balances on your behalf. |
| Trading activity | Orders, fills, positions, bot configurations (DCA, Grid, Dip Buy, signal strategies), and profit/loss history — for both your real exchange accounts and your simulated ("mock") paper-trading account. |
| Billing information | Subscription plan, billing period, and payment status. Card payments are processed by our payment processor, Stripe (Omise, a second processor, remains integrated but inactive) — we receive only a tokenized card reference (last 4 digits, brand) and never see or store your full card number, expiry, or CVC. |
| Notifications | Your notification preferences, and — if you enable push notifications — a browser-issued push subscription endpoint used to deliver them. |
| Technical & usage data | IP address (used to derive an approximate country/region), session cookie for authentication, and standard server logs (timestamps, requests made, errors). |
| Support communications | If you contact us via LINE or another channel, we retain that conversation to help resolve your request. |
We do not sell your personal information, and we do not currently use third-party advertising or analytics trackers on the Service. If that ever changes, we'll update this policy first.
We do not sell or rent your personal information to third parties for their own marketing purposes.
Exchange API secrets and passwords are stored encrypted / hashed, not in plain text. Access to production systems is restricted. That said, no method of storage or transmission is 100% secure, and we can't guarantee absolute security. This policy covers our own handling of your data — it does not extend to the security practices of exchanges you connect, Stripe, Resend, or any other third-party service you choose to use alongside Vectixs.
We retain your account and trading data for as long as your account is active, and for up to 12 months afterward, to meet legal, accounting, or dispute-resolution needs. You can request deletion of your account and associated data at any time (see Section 7).
This policy is written primarily for users in Thailand, where the Service is focused today. If you're located in the EU/UK or California and believe additional rights apply to you under GDPR or CCPA (such as data portability or a formal do-not-sell request), contact us via the channel in Section 11 and we'll do our best to accommodate it.
The Service is not directed at, and we do not knowingly collect information from, anyone under 18. If you believe a minor has created an account, contact us and we'll remove it.
Our servers are located in Singapore. If you access the Service from another country, your information will be transferred to and processed in Singapore, which may have different data protection laws than your own country.
We may update this Privacy Policy from time to time. If we make a material change, we'll update the "Last updated" date above and make reasonable efforts to notify active users.
Questions about this Privacy Policy, or requests to access, correct, or delete your data, can be sent via the Contact link above (LINE).