Privacy notice

Last updated 27 October 2026. Controller: Commercelia Ltd (eCom Healer Software House), support@ecomhealer.com.

What we keep

• Your account: name, email, time zone, a hash of your password (never the password), your 2-step key (encrypted), when you signed in and from which internet address (for security).
• Your Binance API key and secret: encrypted on our server with a key only for your account; only the last 4 characters are ever shown.
• What you set up: alerts, plans, rules, watchlist, notes, journal, goal, PIN (as a hash), practice trades, and the orders our server placed for you.
• What we read from Binance with your key: balances, trades and order results, kept in your own folder to show your figures, profit and loss and tax estimate.
• Phone notifications: if you switch them on, the browser's push address for that device.
• Cookies: one sign-in cookie (CHSESS) and, if you tick "Remember this device", a second one (CHSESS_T). Your browser also keeps small preferences (theme, time zone choice, favourite tabs). No advertising or tracking cookies.

Why

To give you the service you signed up for (contract), and to keep it secure (legitimate interest). We do not sell your data and we do not use it for advertising.

Who else

Binance receives the requests we make with your key. Market prices come from public sources (Binance, CoinGecko, alternative.me, Frankfurter / ExchangeRate-API) — nothing about you is sent to them. On the public price pages, coin logos are fetched by our server and served from our own address, so your browser does not contact CoinGecko. If you connect Bybit, OKX or Coinbase, those exchanges receive the requests we make with your read-only key. Emails are sent through our mail provider. If you choose a paid plan, Stripe takes the payment and receives your name, email and card details directly (we only keep your Stripe customer and subscription numbers, plan and renewal date). Our server is a private virtual server we rent.

How long

Until you delete your account (My account → Delete my account), which removes your folder, your saved key and everything above at once. Security logs of sign-ins are kept up to 12 months.

Your rights

You can ask for a copy of your data (Backup & restore gives most of it at once), to correct it, or to delete it, by writing to support@ecomhealer.com. You can also complain to the Information Commissioner's Office (ico.org.uk).