Privacy Policy

Last Updated: March 2026

Overview

MagicMoneyMachine is offered in two forms with different privacy profiles. This policy covers both honestly.

Self-Hosted Software

Cloud Service (Telegram bot + bot.magicmoneymachine.app)

The hosted cloud service necessarily processes data to operate on your behalf. Specifically, we store and process:

• Exchange API keys you provide — encrypted at rest (AES-256) on our servers, used solely to read balances and place the trades you have enabled. We never ask for withdrawal permission and recommend you never grant it.
• Trading data: your positions, trade history, balances, and performance metrics, as required to run the engine and show you your dashboard.
• Account identifiers: your Telegram ID and, if you provide it, your email address (used for alerts, receipts, and product emails you can opt out of).
• Basic site analytics: page-view events and lead-capture form submissions on our websites, stored in our database. We do not use third-party ad trackers.

We do not sell your data. Public-facing pages (e.g. the live ledger) show only anonymized, aggregated trading data — never your identity, balances, or position sizes.

To delete your cloud data: disconnect via /disconnect in the bot (which removes your stored API keys) and contact support for full account erasure.

Third-Party Services

The Software connects to:

• Coinbase Advanced Trade API — to execute trades and fetch market data. Your API keys are sent directly to Coinbase. We never see or store them.
• Telegram Bot API — if you configure Telegram notifications. Messages are sent via Telegram's servers.
• Stripe — for payment processing and subscription management (processes only payment details via Stripe's secure checkout).
• Alternative.me API — to fetch the Fear & Greed Index (public data, no authentication).

Payment Processing

When you subscribe, payment is processed by Stripe. We receive your email and subscription status — no card numbers are stored on our servers. No trading data, API keys, or personal information is shared with Stripe.

Data Storage

All data is stored locally in the installation directory:

• managed_positions.json — your open positions
• trade_history.json — your trade records
• auto_trader_config.json — your bot settings
• .env — your API credentials (never committed to version control)
• logs/ — application logs

Your Rights

Since all data is local, you have full control:

• View all stored data (it's plain JSON — open in any text editor)
• Delete any or all data at any time
• Export your data using the CSV export feature
• Uninstall by simply deleting the directory

Security

• API keys are stored in .env (excluded from version control)
• Dashboard requires authentication token
• No remote access unless you configure port forwarding
• License validation uses HTTPS encryption

Changes

We may update this Privacy Policy. Changes will be noted in release notes.