Privacy Policy

This Privacy Policy describes how we collect, receive, use, store, share, transfer, and process your Personal Data, and your choices and rights with respect to it. “Personal Data” means any information relating to an identified or identifiable individual. If you do not agree with this Privacy Policy, you should not use our website or services.

We update this Privacy Policy from time to time. We will post changes on this page and, if changes are material, provide more prominent notice (for example, by email). Terms not defined here have the meaning set forth in the Elitra Terms of Service.

Questions, or to exercise your privacy rights: contact@elitra.xyz.

1Information We Collect About You

a. Information You Provide to Elitra

• Account information. Your email address, social-login identifier, or phone number used to create and authenticate your account, and your wallet address(es).
• Automation configuration. The instructions you configure on the Platform — assets, amounts, schedules, limits, and policies.
• Connected-account data. If you choose to connect an external brokerage or exchange account through our third-party account-connection provider, we receive account data you authorize — such as holdings, balances, positions, and transaction history — through that connection. We never receive or store your brokerage or exchange login credentials; the connection is established directly between you, our connection partner, and your institution, and you can revoke it at any time.
• Payment information. If you purchase a subscription, payment is processed by our third-party payment processor; we do not store full card numbers.
• Other information you provide when contacting support, participating in a promotion or community program, or connecting a social or messaging account (for example, Telegram) to your Elitra account.

b. Information We Collect When You Use Our Services

• Log files. IP address, browser type, device and operating-system information, pages viewed, access times, and referring addresses, collected automatically when you use the website or Platform.
• Usage data. Metrics about your use of the Platform — which features you use, when automations are created, modified, paused, or executed, and how you interact with the product. Where we engage third-party analytics providers, we share data with them in a de-identified manner.

2How We Use Personal Data

• To provide the Platform. We use your account information, wallet address, connected-account data, and automation configurations to create your account, authenticate you, execute the automations you configure, display your portfolio, generate execution receipts and notifications, and provide customer support.
• To improve and develop our product. We use usage data to understand trends, prioritize features, and improve reliability. Any externally published statistics are aggregated and do not identify individual users.
• To secure and protect the Platform. We use account information and log data to verify accounts, investigate and prevent security incidents, detect and prevent abuse, screen for sanctioned or prohibited activity, and meet legal and regulatory requirements. IP addresses are logged for security and debugging, and may be linked to other data you have provided for these purposes.
• To communicate with you. Service notifications (for example, execution receipts, approval requests, and security alerts) and, with your consent where required, marketing communications you can opt out of at any time.

3How We Share Personal Data

a. Service Providers

We share Personal Data with third-party service providers only as needed to operate the Platform, and they are prohibited from using it for other purposes and required to keep it confidential. These include:

• wallet infrastructure (user-controlled embedded wallets and authentication);
• brokerage/exchange account connections — connection tokens and account data flow through this provider under your authorization;
• payment processing and fiat on/off-ramp and stablecoin infrastructure — these partners perform their own identity verification (KYC) where required, under their own privacy policies;
• hosting, data infrastructure, analytics, and customer-support tooling.

b. Compelled Disclosure

We may use or disclose Personal Data if required by law or if we reasonably believe it necessary to protect our rights, protect your safety or the safety of others, investigate fraud or prohibited activity, or comply with a law, court order, or legal process.

c. No Sale

We never sell your Personal Data to any third party.

4International Transfers

When Personal Data of individuals in the EEA, Switzerland, or the UK is shared with third parties, we use appropriate legal mechanisms to safeguard the transfer, such as Standard Contractual Clauses. Contact us for more information about the mechanisms we rely on.

5How We Store and Secure Personal Data

We use a variety of security technologies and procedures to protect Personal Data from unauthorized access, use, or disclosure, including encryption in transit, access controls, secrets management, and secured cloud infrastructure. No transmission or storage system can be guaranteed 100% secure.

Retention. How long we keep information depends on its type and how it was collected. We retain Personal Data while you have an account and thereafter only as long as we have an ongoing legitimate business need (for example, to comply with legal obligations, resolve disputes, and enforce agreements). After a reasonable period we delete or anonymize your information or, if not possible, securely store and isolate it from further use until deletion is possible.

6Data Privacy On-Chain

The nature of transacting in digital assets inherently means that some of your information is made available on public blockchains — including your wallet address, transaction history, token balances, and related metadata. On-chain activity is inherently public, permanent, and outside the scope of this Privacy Policy, and you acknowledge this by using the Platform.

7Cookies

We and our analytics and service providers use cookies and similar technologies. A cookie is a small file sent to your device that allows a site to recognize your browser. We use: essential cookies (strictly necessary for the website and Platform to operate), performance and functionality cookies, and analytics cookies (aggregate understanding of how the site is used, through Google Analytics and PostHog). You can accept or refuse cookies through your browser controls; refusing cookies may restrict some functionality. Opt-out resources: aboutads.info/choices and youronlinechoices.eu.

8Your Privacy Rights and Choices

You have the following data-protection rights:

• Access, correction, or deletion of your Personal Data;
• Objection to, or restriction of, processing, and portability of your Personal Data;
• Withdrawal of consent at any time, where processing is based on consent (without affecting prior lawful processing);
• Complaint to a data-protection authority.

To exercise any of these rights, email contact@elitra.xyz. We may verify your identity by a method appropriate to the request, and depending on where you reside you may designate an authorized agent. We will respond within a reasonable timeframe; in some cases rights may be limited where fulfilling a request would impair others’ rights, our ability to provide a requested service, or our legal obligations. Note that we cannot edit or delete information recorded on a public blockchain.

9California Privacy Rights

This section applies to California consumers under the California Consumer Privacy Act (“CCPA”). Elitra is a business and does not sell or share Personal Information as those terms are defined in the CCPA. Categories we collect: identifiers (name, email, wallet address); commercial information (subscription records, automation and transaction history); internet or network activity; geolocation (IP-derived); financial information (payment records, connected-account data you authorize); and inferences. Purposes are described in Section 2; disclosure categories in Section 3; retention in Section 5.

California residents have the rights of access (what we collected, used, and disclosed in the past 12 months), deletion (subject to exceptions), correction, and non-discrimination for exercising these rights. Exercise them (directly or via an authorized agent, whose identity and authority we may verify) using the contact details in Section 8. If you cannot access this policy due to a disability, contact us and we will provide it in an alternative format.

10Other Important Information

a. We never sell Personal Data.

b. Children. The website, product, and services are not intended for or targeted at children under 18, and we do not knowingly collect Personal Data about children under 18. If you believe we have, contact us so we may delete it.

Contact