Privacy Policy

Last updated: December 27, 2025

1. Introduction

Trevia OÜ ("we", "us", "our") operates EntryGenius. This Privacy Policy explains how we collect, use, and protect your personal data in compliance with the EU General Data Protection Regulation (GDPR).

2. Data Controller

Trevia OÜ
Registry No.: 17298535
Harju Maakond, Tallinn, Lasnamäe linnaosa
Lõõtsa tn 5-11, 11415 Tallinn, Estonia
Email: [email protected]

3. Data We Collect

3.1 Information You Provide

  • Account Data: Email address, name, country
  • Billing Data: Name, address, business name (optional), VAT number (optional)
  • Telegram Data: Telegram username and ID (if connected)
  • Trading Data: Wallet addresses, API keys (encrypted), trading preferences

3.2 Automatically Collected Data

  • IP address and device information
  • Usage data and analytics
  • Push notification tokens

4. How We Use Your Data

We use your data to:

  • Provide and improve our Service
  • Process payments and generate invoices
  • Send service notifications and alerts
  • Execute copy-trading operations (if enabled)
  • Comply with legal obligations

5. Legal Basis for Processing

  • Contract: Processing necessary to provide the Service you subscribed to
  • Consent: Marketing communications (you can opt out anytime)
  • Legal Obligation: Tax and accounting records
  • Legitimate Interest: Service improvement and security

6. Data Sharing

We share data only with:

  • Payment Processors: NOWPayments (for crypto payments)
  • Email Services: For transactional emails
  • Trading Platforms: Hyperliquid (if copy-trading enabled, using your API keys)
  • Accounting: Companio (Estonian accounting service)

We do NOT sell your personal data to third parties.

7. Data Retention

  • Account Data: Retained while account is active, deleted 30 days after account deletion
  • Billing/Invoice Data: Retained for 7 years (Estonian tax law requirement)
  • Trading History: Retained for 1 year after account deletion

8. Data Security

We implement industry-standard security measures:

  • Encryption of sensitive data (API keys, passwords)
  • HTTPS/TLS for all communications
  • Regular security audits
  • Access controls and monitoring

9. Your Rights (GDPR)

You have the right to:

  • Access: Request a copy of your personal data
  • Rectification: Correct inaccurate data
  • Erasure: Request deletion of your data ("right to be forgotten")
  • Portability: Receive your data in a portable format
  • Objection: Object to certain processing activities
  • Withdraw Consent: Withdraw consent at any time

To exercise these rights, contact us at [email protected]

10. Cookies

We use essential cookies for:

  • Session management and authentication
  • Security (CSRF protection)

We do not use tracking or advertising cookies.

11. International Transfers

Your data is primarily stored on servers in the European Union. If transferred outside the EU, we ensure adequate protection through Standard Contractual Clauses.

12. Children's Privacy

Our Service is not intended for users under 18 years old. We do not knowingly collect data from minors.

13. Changes to This Policy

We may update this policy periodically. We will notify you of significant changes via email or in-app notification.

14. Complaints

If you have concerns about our data practices, you may lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) at www.aki.ee

15. Contact

For privacy-related inquiries:
Email: [email protected]