Privacy Policy.

Who this policy covers

CEXBoost LLC operates the KAAPA EXPERT website and trading workspace. This policy describes the information processed through those services. Independent exchanges, payment providers and communication platforms have their own privacy policies.

Information the service processes

Account information may include your name, email address, password hash, phone number if supplied, account preferences, security settings and support messages. Login and operational records may include IP addresses, timestamps, device or browser information and security events.

When you connect an exchange, the platform processes your API credentials, account identifiers, balances, bot configuration, orders, positions and trading records as needed for the connection. Stored exchange credentials are encrypted using application encryption.

Billing records may include your selected plan, payment amount, transaction reference, payment network, submitted screenshots or documents, approval status and invoices. Referral records link your inviter code and attributed signups. If you register a notification device or link a messaging account, associated device tokens or messaging identifiers may also be processed.

Why this information is used

Information is used to create and secure accounts, connect exchanges, execute configured trading actions, display activity, provide support, manage subscriptions, verify payments and track referrals. Operational and security records support troubleshooting, fraud prevention and investigation of unauthorized activity.

The processing grounds and privacy rights that apply depend on your location and the relevant law. Account and payment information is needed to deliver the features you request; some records may also be needed to meet applicable recordkeeping obligations or resolve disputes.

Service providers and other recipients

Relevant information is processed by the providers needed to run the service, such as hosting and infrastructure providers, supported exchanges, enabled payment processors, email or notification services and connected messaging platforms. Information may be disclosed when required by applicable law or needed to investigate misuse or protect accounts.

Your inviter can see attributed signup details in their team list, including your name, a partially hidden email address, joining date and referral conversion status. They do not receive your password, API secret or access to your trading account through the invite feature.

If you choose to download or share a trade poster, invitation link or other account-generated content, recipients may see the information included in that content. Review it before sharing.

Cookies, local storage and third-party content

The website uses session and security cookies to maintain login state and protect forms. Browser storage is used for preferences and interface state, such as light or dark theme and dismissed alerts. Clearing or blocking storage can reset preferences or affect account features.

Some pages load third-party fonts, scripts or embedded content. These requests can disclose connection information, such as your IP address and browser details, to the relevant provider. External websites and content providers apply their own policies. The personal invitation QR is generated in your browser rather than sent to an external QR-generation service.

Optional Google Analytics

Public website pages use Google Analytics 4 only after you choose Analytics only or Accept both. It measures public page visits, signup-button clicks and, when consent is present, a successful website signup. It uses analytics identifiers and processes technical information such as browser, device and connection data. Google may process this information on its infrastructure.

The integration does not run on the signed-in trading dashboard, admin screens, checkout or credential forms. The events we configure do not contain your email, account ID, API credentials, exchange balances or payment details. We remove query strings and fragments from the page URLs we send and reduce referral URLs to their origin.

Choose Reject optional to keep Google Analytics off. You can reopen Cookie settings in the public website footer to change your choice. The choice is stored in your browser for up to 180 days; clearing browser storage resets it. Rejecting after accepting disables further analytics events from this integration and removes its accessible Google Analytics cookies in this browser. Advertising storage, advertising personalization and Google signals are not enabled by this integration.

For information about Google processing, visit policies.google.com/privacy. Google Analytics collection, retention settings and access to the reports are managed in the website operator Analytics property.

Optional Meta Pixel advertising measurement

Choosing Accept both enables Meta Pixel alongside Google Analytics on selected public website pages. Analytics only does not enable Meta Pixel. Existing analytics consent does not automatically grant advertising consent.

Meta Pixel sends a PageView event and may process browser and device information, IP address, the public page URL, referral information and advertising cookie identifiers to measure Facebook and Instagram advertising. Meta may associate this information with your Meta account under its own policies. This installation does not send account fields or advanced matching information and disables automatic event detection.

The Pixel is not installed on account forms, dashboards, admin screens or payment pages. Public URLs with fragments or query parameters other than supported campaign parameters are excluded. This installation does not yet send registration, checkout or purchase conversion events.

You can change your choice using Cookie settings in the public footer. Reject optional or Analytics only stops further Pixel events from this integration and removes accessible _fbp and _fbc cookies. Consent preferences expire after 180 days. Information already sent is governed by Meta privacy and retention policies at facebook.com/privacy/policy.

Security and account controls

Password hashing, encrypted credential storage and access controls are used by the application. No storage system, exchange connection or internet transmission can be guaranteed to be completely secure.

Use unique passwords, enable available two-factor authentication and restrict exchange API permissions. You can revoke API access directly with your exchange. Do not upload private keys, recovery phrases or passwords in payment proof or support messages.

Retention and international processing

Account, billing, trading and security information may remain in operational databases, logs and backups. Retention depends on service needs, security investigations, disputes and applicable legal requirements. Deleting an account does not necessarily remove records that must be retained or information still held by an independent exchange.

Hosting and connected providers may process information in countries other than your own. The countries and safeguards applicable to a particular request depend on the provider and the relevant legal requirements. Contact support for questions about a specific connection or data request.

Your choices and privacy requests

You can update available profile settings, change security preferences, disconnect supported integrations and manage notification choices through the workspace or the relevant third-party service.

To request access, correction, deletion or other privacy-related assistance, contact the support address below from your registered email. Identity verification may be needed before information is disclosed or changed. The rights available and any exceptions depend on applicable law. You may also have the right to contact the relevant privacy regulator.

Updates and contact

Changes to this policy will be reflected by the updated date on this page. Contact CEXBoost LLC through the support address below if you have questions about how your information is processed.