This Policy explains what personal data we collect when you use the TRUE AI app at app.truefinance.ai, how we use it, and your rights.
1. Data we collect
- You provide: wallet address, display name, and email (if you link one); messages/support requests.
- Generated by your use: chat history, trade and swap activity, points/rewards ledger, and in-app actions.
- Technical: IP address (we collect IP, including for compliance/screening), device and browser type, and session metadata.
A wallet address linked to you is personal data, and the on-chain activity associated with it is treated as personal data under this Policy. Market data we display is sourced from third parties and is not linked to you personally.
2. How we use data, and our legal bases
We process personal data to:
- Operate and provide the Service (authenticate you, process transactions you authorize, calculate rewards) — performance of a contract.
- Comply with legal obligations, including AML/sanctions screening and tax reporting/withholding where required — legal obligation.
- Secure the Service and prevent fraud, abuse, and illicit use — legitimate interests.
- Improve the Service and understand usage (aggregate analytics) — legitimate interests.
- Communicate with you about the Service, security, and support — legitimate interests / contract.
- Marketing, only where permitted and with consent where required — consent.
We do not sell your personal data.
3. Cookies & similar technologies
We use cookies and similar technologies to keep you signed in, remember preferences, measure traffic, and understand performance. You can control cookies through your browser; disabling some may affect functionality. Where required, we obtain consent for non-essential cookies.
4. Sharing & sub-processors
We share personal data with service providers acting on our behalf (authentication/wallet, analytics, infrastructure/hosting, market data, communications, and compliance/screening vendors) under appropriate agreements, and with authorities where legally required. When you authorize a third-party app (e.g., via the MCP/OAuth flow), it receives only the data covered by the scopes you grant, which you can revoke at any time.
5. International transfers
We operate from Panama and use providers in various countries, so your data may be transferred internationally. Where data of EU/EEA or UK individuals is transferred, we rely on appropriate safeguards (such as Standard Contractual Clauses) as required by applicable law.
6. Retention
We retain personal data only as long as necessary to provide the Service and for legitimate business or legal purposes (including AML record-keeping and tax). When no longer needed, we delete or anonymize it.
Security. We use reasonable technical and organizational measures to protect personal data. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. To the fullest extent permitted by law, we are not liable for unauthorized access to, or loss or disclosure of, data that occurs despite reasonable measures or that is beyond our reasonable control, including any compromise of your wallet, devices, or credentials.
7. Your rights
Depending on your location, you may have rights to access, correct, delete, port, restrict, or object to processing of your personal data, and to withdraw consent. EU/EEA and UK residents have these rights under the GDPR/UK GDPR. To exercise them, contact us at contact@true.trading. You may also lodge a complaint with your local data-protection authority.
8. Children
The Service is not directed to anyone under 18, and we do not knowingly collect personal data from them.
9. Changes & contact
We may update this Policy; material changes will be posted here with a new date. Questions or requests: True Trading Corp., PH Oceania Business Plaza, Level 15, Office 15B, Punta Pacifica, Panama City, Panama · contact@true.trading.
Trading, agents, MCP and copy-trading data — 16 September 2026
Trading workflows may process wallet/account identifiers, balances, positions, collateral, leverage, orders, fills, transaction hashes, funding and liquidation records. Agent workflows also process strategy instructions, allocations, permission or session-permit metadata, status and execution history. Copy trading uses follow relationships, strategy or creator identifiers, allocations and performance data. We use these categories to deliver requested features, calculate applicable fees, maintain records, investigate failures and secure the Service under the legal bases above. Do not submit private keys or seed phrases.
When you connect an MCP client or another assistant, requested account information and tool results can pass to that provider within the access you authorize. Prompts may contain personal or financial information. That provider’s own privacy terms govern its independent processing and retention; disconnecting TRUE does not erase copies it already received. Revocation ends future access subject to processing of requests already in flight, and does not cancel trading instructions already created.
Publishing or following a public strategy can expose the public profile, strategy and performance information shown in the publication flow. Blockchain addresses and transactions may be publicly observable and linkable to you; public-chain records cannot be deleted by TRUE. This does not remove rights over off-chain personal data we control. We retain operational and authorization records only as needed for service delivery, security, dispute resolution and legal obligations, then delete or anonymize them. Contact contact@true.trading to request access, correction, deletion, portability, restriction or objection where applicable, or information about retention. Non-waivable rights, lawful consent requirements and complaints to competent authorities, including Panama’s ANTAI where applicable, remain available.