This Privacy Policy explains how cBot Factory collects, uses, discloses, stores, and protects personal data when you visit the website, create an account, configure strategies, purchase a subscription, generate a build, or contact us. It is intended to provide the information required by the Philippine Data Privacy Act of 2012 and its implementing rules.
1. Personal information controller
cBot Factory is the personal information controller for the personal data described in this Policy. Submit privacy questions and data-subject requests through our Contact Us form.
2. Personal data we process
Account information
Your email address, display name, account identifier, authentication status, plan, and related profile information. Password authentication is handled through our authentication provider; cBot Factory does not receive your readable password.
Subscription and payment information
Your plan, subscription status, PayPal subscription and payer identifiers, billing dates, and transaction-related status. PayPal processes payment credentials. cBot Factory does not store your full card number, PayPal password, or complete payment-instrument credentials.
Strategy and build information
Configuration data you submit, such as strategy names, currency pairs, timeframes, selected indicators, parameters, entry and exit rules, risk controls, validation results, and build records. Some configuration may remain only in your browser until you submit or save it.
Technical and usage information
IP address, device and browser information, authentication cookies, request timestamps, page and API activity, error details, security events, and similar operational logs produced when you use the Service.
Communications
Your name, email address, selected contact category, message content, and other information you choose to provide when requesting support, making a privacy request, or discussing licensing.
3. Purposes and bases for processing
We process personal data to:
- create, authenticate, secure, and administer accounts;
- provide strategy configuration, validation, build, plan, and licensing features;
- create, confirm, change, cancel, and reconcile PayPal subscriptions;
- enforce plan limits and protect generated outputs from unauthorized sharing;
- respond to support, billing, privacy, and licensing requests;
- detect fraud, abuse, security incidents, and technical failures;
- maintain, troubleshoot, measure, and improve the Service; and
- comply with legal, accounting, tax, dispute-resolution, and regulatory obligations.
Depending on the activity, processing is based on performance of our contract with you, steps taken at your request before entering that contract, your consent, compliance with legal obligations, or our legitimate interests in operating and securing the Service where those interests are not overridden by your rights.
4. Cookies and local storage
We use cookies and similar browser storage that are necessary for authentication, session continuity, security, and local strategy-draft preferences. We do not state that these technologies are advertising cookies unless advertising or cross-site tracking is introduced. Blocking necessary cookies may prevent sign-in or account features from working.
6. International data transfers
Our providers may process data in countries outside the Philippines. When personal data is transferred or processed internationally, we use contractual, technical, and organizational measures intended to provide a comparable level of protection and require providers to protect the data in accordance with applicable obligations.
7. Retention
We retain personal data only for as long as reasonably necessary for its stated purpose:
- account and profile data for the life of the account and generally up to 30 days after an approved deletion request, subject to backups and legal holds;
- backup copies for up to 90 additional days where technically necessary;
- subscription, transaction, and accounting records for the period required by applicable tax, accounting, fraud-prevention, and dispute-resolution obligations;
- support and licensing communications for up to 24 months after the matter is closed, unless a longer period is required for an active dispute or legal obligation;
- security and operational logs generally for up to 12 months, unless needed longer to investigate an incident; and
- strategy and build records while your account is active or until deleted where deletion functionality is available, subject to backups, fraud prevention, licensing records, and legal requirements.
We may anonymize information so that it can no longer reasonably identify you. Properly anonymized information may be retained for analysis and service improvement.
8. Your data rights
Subject to the Data Privacy Act and other applicable law, you may have rights to be informed, access personal data, correct inaccurate data, object to certain processing, withdraw consent, request blocking or erasure, obtain data portability where applicable, and seek indemnification for unlawful processing. You may also lodge a complaint with the Philippine National Privacy Commission.
Use our Contact Us form and choose “Privacy request.” Describe the request and the account email concerned. We may request reasonable verification before disclosing, correcting, exporting, or deleting account data. We will not ask for your password or payment credentials.
Information about Philippine data-subject rights is available from the National Privacy Commission.
9. Security and data incidents
We use reasonable organizational and technical safeguards designed to protect personal data, including access controls, authenticated account access, transport encryption provided by our infrastructure, protected server-side credentials, and restricted entitlement updates. No internet service can guarantee absolute security.
If a personal data breach requires notification, cBot Factory will notify the National Privacy Commission and affected data subjects within the periods required by applicable law, using the information reasonably available at the time.
10. Children
The Service is intended only for adults aged 18 or older. We do not knowingly offer accounts to children. Contact us if you believe a child has provided personal data so we can investigate and take appropriate action.
11. Changes to this Policy
We may update this Policy to reflect changes in the Service, providers, law, or data practices. We will change the effective date and provide additional notice for material changes where appropriate.
12. Contact
For privacy questions or requests, use the cBot Factory Contact Us form and choose “Privacy request.”