Privacy Policy

1. Introduction

This Privacy Policy describes how ChinaBot ("we", "us", "our") collects, uses, and protects information when you use the Service: the website and web dashboard, as well as the Telegram bot, available at cschinabot.com and related channels (the "Service").

By using the Service, you agree to the practices described in this document. If you do not agree with any of its provisions, please stop using the Service.

2. What Data We Collect

We aim to collect the minimum amount of information necessary for the Service to function properly:

• Telegram account data — chat ID, name, and other profile fields that Telegram provides when you interact with the bot; notification and preference settings in the bot and the web dashboard.
• Web access data — login sessions, actions required for the web dashboard to operate (including filters, search, and navigation), and technical records of requests to the server.
• Linked accounts — when connecting via OAuth: information about your Steam, Discord, or other provider account, to the extent you authorize during sign-in.
• Trading and product data — watchlists and mute lists, portfolio, filter settings, and the history of signals and reports.
• Web Push — technical parameters of your browser push notification subscription (for example, the endpoint and keys), needed solely to deliver notifications.

We do not collect Steam passwords, full bank card details, or other sensitive payment information on our servers. Payments are processed by a payment provider (for example, Stripe); we may receive from it the payment status and transaction identifiers needed for subscription accounting.

3. Purposes of Data Processing

• Providing, maintaining, and improving the functionality of the Service.
• Generating personalized trading signals and analytical reports.
• Sending system notifications (updates, security, important changes).
• Internal anonymized or aggregated summaries for product development, where applicable.
• Preventing fraud and ensuring platform security.

4. Data Storage and Protection

Data is processed and stored on the infrastructure of the Service operator. Data transmitted between your device and the servers travels over secure channels (HTTPS). We apply organizational and technical measures appropriate to the risks and scale of the Service.

The retention period is determined by the need to provide the Service's features, fulfill contractual and legal obligations, resolve disputes, and ensure security. After your account is deleted at your request or by decision of the operator, the associated data is deleted or anonymized within a reasonable period, unless otherwise required by law.

5. Cookies, Local Storage, and Logs

On the website we primarily use essential mechanisms: cookies and similar technologies for login sessions, protection against request forgery (CSRF), and language preferences. Without them, the web dashboard cannot function correctly.

For aggregated traffic statistics we use Google Analytics 4 (gtag.js). Google Analytics collects anonymized data: pseudonymous visitor identifiers, a truncated IP address, pages viewed, device and browser type, referral source, and language. We need this data solely to understand which sections are in demand and to improve the Service; we do not use it for advertising or cross-site profiling and do not connect third-party advertising networks.

Google Analytics processing is governed by the Google privacy policy. You can opt out of Google Analytics tracking using the official Google browser add-on or by means of your browser: the "Do Not Track" mode, tracker blockers, and privacy extensions.

The server may keep technical logs (for example, IP address, request time, response code, User-Agent) to ensure the security, debugging, and stability of the Service.

6. Sharing Data with Third Parties

We do not sell, trade, or rent your personal information. Data may be shared only:

• With contractors without whom the Service cannot operate (hosting, the payment provider, Telegram infrastructure, and other platforms you interact with) — to the extent necessary to provide the service and under confidentiality terms or the standard terms of such platforms.
• With the web analytics provider — Google LLC (Google Analytics, servers in the US and the EU) — to the extent described in Section 5 (anonymized visit data, without personal identifiers).
• At the request of competent government authorities in accordance with applicable law.

7. Your Rights

You have the right to:

• Request access — receive information about the categories of data we process in relation to your account and, where possible, a copy of such data.
• Correct data — make changes to inaccurate information where supported by the Service interface, or by contacting the operator.
• Delete data / opt out of the Service — request the deletion of records associated with you. Self-service deletion of the entire account may not be available in the interface; in that case, send a request to the operator (see below).
• Export your portfolio — after signing in to the web dashboard, you can download your portfolio data in CSV format via the /api/portfolio/export endpoint (parameters: for example, type=transactions or type=holdings).
• Limit notifications — turn off individual notification types in the bot or web dashboard settings where available.

To exercise rights not covered by the interface, or to have your data deleted, contact the operator on Telegram: @serbyte.

8. Minors

The Service is not intended for persons under 16 years of age. We do not knowingly collect data from minors. If you discover that a child has provided us with their data, please contact us to have it deleted.

9. Changes to This Policy

We reserve the right to update this Policy. For material changes, we will endeavor to give notice at least 14 days before the changes take effect — via the web dashboard interface, a message in the bot, or another available communication channel. The date of the last update is always shown at the top of this document.