1. Responsibility and contact
Quantum Protocol Ltd operates SharkRule and is the controller of the personal data described in this policy. Registered in England and Wales, company number 17505717. Registered office: 124 City Road, London, EC1V 2NX, United Kingdom. Contact privacy@sharkrule.com or support@sharkrule.com for information, requests or privacy complaints.
Quantum Protocol Ltd is listed on the UK Information Commissioner’s Office (ICO) register of fee payers. Registration reference: ZC270069.
2. Account, waitlist and messages
We process your email, chosen language, registration and sign-in records, permissions and messages needed to operate your account or answer you. Waitlist registration stores your address, language and registration time; a confirmation-send record is not evidence that you opened or verified the email. We use these details for requested access updates, necessary account messages, security and support. Joining the waitlist does not start trading or purchase a plan.
We save waitlist requests as pending and send an email to verify access to the mailbox. Confirmed addresses are recorded separately. We retain signup and abuse-review records until deletion is requested, use resend limits to prevent abuse, and track email delivery. Confirmation does not verify a person’s identity.
When you choose a paid subscription, our payment processing provider collects payment details on its hosted checkout and billing pages. We send your email to create your billing account and process customer, subscription and checkout identifiers, your selected plan and price, subscription status, billing period, cancellation status and payment-event references to provide paid access, reconcile payments and help with billing. Invoices are available through the hosted billing portal. Card numbers and security codes are entered directly with the payment processing provider; SharkRule does not store full card numbers or security codes on its servers.
3. Exchange connection and trading records
When you connect Binance or Coinbase, we process the API key name and secret or private key, permitted capabilities, connection status, balances, your rule settings, approval timestamps and order or fill records needed to follow your instructions and investigate uncertain outcomes. Connection credentials are encrypted in protected server storage. They are not intended for logs or analytics. This does not eliminate all security risks.
Your connected exchange receives the API requests and signatures needed for the connection and approved actions. Your funds remain with your connected exchange. Never send keys or secrets through the waitlist or support. Disconnecting or stopping a rule does not undo orders already sent, and relevant transaction or incident records may still need to be retained. Existing account and recovery records remain separate; their existence does not authorize trading on either exchange.
4. Website logs and optional measurement
Hosting systems process IP addresses, request times, URLs, browser information and errors to provide and protect the service. Necessary sign-in cookies and security records support authenticated access. They are separate from optional analytics.
Optional analytics tools load only with analytics consent. Advertising measurement loads only with separate advertising-measurement consent. They can receive page URLs, referral, browser, connection and cookie information; we do not send your email, API credentials, wallet or trading details to these tags. Cookie settings lets you change either choice. Browser local storage remembers preferences. Withdrawal stops future optional tracking and removes accessible first-party tracking cookies, but cannot recall data already sent. Clearing browser data removes remembered preferences.
With your analytics consent, SharkRule also measures which public pages lead to a completed, verified account signup and the first explicit start of a Shark, in simulation or live mode. A random browser identifier and a signed cookie keep the first public page, language and broad source category for a 30-day attribution window. We link this optional record to your account internally only when you complete a new verified signup. Reports and the private editorial export contain aggregate page counts, never email addresses, account identifiers, search queries, API credentials, order details or balances. This measurement does not send account information to analytics providers. Withdrawing analytics consent in Cookie settings clears the browser identifier and requests deletion of its optional linked record; a failed deletion request is retried on a later visit. Previously exported aggregate counts may remain. Optional measurement records are separate from necessary account, security and trading records; you can request deletion using the contact above. We retain an opaque withdrawal marker without the original page or account link to prevent delayed requests from recreating that association.
5. Purposes, providers and international processing
We process information to provide the service you request, carry out your approved instructions, protect accounts, answer support and meet legal duties. Where applicable, processing relies on performing the requested service, legitimate interests in security and support, legal obligations or consent for optional measurement and communications that require it. A template does not determine a trading mandate for you.
Our hosting provider hosts the service; our email delivery provider processes email recipients, message content and delivery information. Your connected exchange processes connected exchange requests under its own policies. Analytics and advertising-measurement providers process optional measurement only if enabled. Authorized operators and necessary service providers may access relevant records. We do not sell the waitlist or provide it to advertisers. International providers may process data outside the United Kingdom or your country, including the United States. Applicable transfer safeguards, such as recognized adequacy or contractual safeguards, are required where data-protection law demands them. Contact us for the arrangements relevant to your data.
Our payment processing provider handles payments, billing information and invoices under its own privacy policy.
6. Retention and your choices
We keep records while needed for the requested service, security, reconciliation, support and legal obligations. Credentials are needed while a connection is in use; relevant trading and incident records can outlast it. Backups may retain copies until replaced. There is no single retention period for every category. Ask us about deletion, leaving the waitlist or stopping optional communications.
Where applicable, you can request access, correction, deletion, portability, restriction or objection, and withdraw consent for future processing. We may verify identity proportionately and explain legal retention limits. You can contact us about a privacy concern at privacy@sharkrule.com. You also have the right to complain to the UK Information Commissioner’s Office (ICO) or your competent local authority. Necessary security and trade-status messages are distinct from optional promotional messages.
Billing records may remain after account closure where needed for accounting, payment disputes and legal obligations.
7. Security, adults and changes
HTTPS and access controls help protect information; no internet service can promise complete security. The service is intended for adults aged 18 or over. Contact us if a child has provided data. We date updates and provide notice or obtain consent when required before materially different processing begins. A policy update does not renew a trading authorization.