Privacy Policy

Last updated: 7 October 2026

1. Who we are

Auspex ("we", "us") runs the trading platform at auspex-trade.com (the "Service") and is the controller of the personal data described here. This policy explains what we collect, why, who we share it with and your rights. Contact: support@auspex-trade.com. The operating company and its registered address will be published here on incorporation.

2. What we collect

  • Account: your email address, your name if you give it, and the user ID from our login provider (Privy). If you sign in with Google, we receive your email and name from Google through Privy.
  • Wallet addresses: the public addresses of the wallets created for you (your Hyperliquid wallet, any Portfolio wallet, and any older wallets created for your account before 5 October 2026). We never have your private keys.
  • Trading activity: orders, positions, fills, prices, sizes, leverage, stops and take-profits, fees paid, profit and loss, copy-trading and follow settings, limit orders, any past swaps, and withdrawals you make through the Service.
  • Security records: a log of every transaction our key signs on your wallets, and automated monitoring of your wallets' public on-chain activity so that we can spot anything we did not sign (for example a leaked key) and alert our team.
  • Community: if you join, your handle and sharing choices. Your trades after you joined are shown as you choose (section 5).
  • Referrals: the code you joined with, who you referred, the fees they paid that count towards your earnings, your earnings and your payouts.
  • How you found us: when you create an account, the page you first landed on, the site that linked you to it and any campaign tags in the link, kept for that session in your browser until the account exists; and, if you answer it, your one-word reply to "where did you hear about Auspex". We use it to see which of our posts and partners bring people here.
  • Applications: if you apply to be a creator partner, or applied for Auspex Auto while applications were open, the answers you gave (for example your country, trading experience, platform, audience size and content links), plus the country indicated by your IP address at the time.
  • Support and messages: support tickets, your questions to our in-app assistant, and, if you choose to link them, your Telegram chat ID and browser push notification subscription.
  • Technical data: IP address, browser and device type, and the pages and features you use, recorded in standard server and security logs. Server logs are kept for 30 days.
  • Country of connection: the country your connection appears to come from, recorded when you sign in and against each trade you place. We use it to measure where the Service is used and to meet our obligations under section 2 of the Terms. It is not precise, it is not your address, and we keep the per-trade record for 12 months.

3. Why we use it (and our lawful basis)

  • To provide the Service you signed up for (contract): accounts, wallets, placing and managing trades, automated orders, referrals and payouts, Community, notifications and support.
  • To keep the Service and your funds secure (legitimate interests): signing logs, wallet monitoring, fraud and abuse prevention, including referral abuse.
  • To meet legal obligations and to know where the Service is used (legal obligation and legitimate interests): your declared country, your one-time confirmation that you are 18 or over and not resident where the Service is restricted, and the country of your connection, which is used to decide eligibility for Auspex Auto and otherwise for measurement.
  • To improve the Service (legitimate interests): understanding which features are used and fixing faults.
  • To send product updates by email (legitimate interests, or consent where required). You can opt out at any time.

We do not sell your personal data, and we do not use advertising trackers.

4. Who we share it with

We share only what each provider needs to do its job. Where a provider is one you deal with directly, we name it; the rest are described by what they do and where they are.

  • Login and wallet infrastructure: Privy (USA). Runs sign-in and holds your wallet keys, which we never see. You use it directly when you log in.
  • Trading venues: Hyperliquid and trade.xyz. They receive your wallet address and the details of the trades and transfers you make, as does the public blockchain each one settles on.
  • Bridging providers (USA and EU): receive your wallet address and the details of deposits you move from another chain into your Auspex wallet.
  • Blockchain data and node providers (USA): read your wallets' public balances and transactions on our behalf; they receive your wallet address.
  • Database, hosting and network providers (database in London, UK; application hosting and network security in the USA with a global edge network; trading and monitoring servers in London, UK).
  • Email delivery provider (USA): your email address, name and the content of account and product emails.
  • AI model providers (USA): the questions you type into the in-app assistant and the details of the position they are about, never your name or email.
  • Telegram (Dubai / EU): if you link Telegram, it delivers your notifications. Separately, our team receives operational notices on Telegram, which include your email address when you sign up or apply, and masked identifiers otherwise.
  • Push notification services (Google, Apple, Mozilla), only if you turn push notifications on: they receive a device token, not your identity.
  • Coinbase (USA): if you buy crypto by card through the Service you are taken to Coinbase, which receives your wallet address and IP address. Coinbase's own policy applies from there.
  • Embedded content: a video on the landing page is loaded by your browser from its provider, which therefore sees your IP address as any website you visit would.

We can give you the full list of current providers on request at support@auspex-trade.com. We may also disclose data where the law requires it, for example in response to a valid request from a court, regulator or law enforcement, or to protect users from fraud.

5. What other people can see

  • Blockchains are public. Anyone can see your wallet addresses' balances and transactions. This is how blockchains work, and neither we nor anyone else can change or delete on-chain records.
  • Community (optional): your handle and the trades you choose to share after joining appear in the public feed and leaderboard. Dollar amounts appear only if you allow them.
  • Live ticker: recent trades on Auspex appear in an anonymous ticker showing the market, direction, leverage, the percentage result on closed trades, and the time. It shows no name, handle, amount or address, except that Community members appear under their handle for trades made after joining. You can keep your trades out of the ticker at any time with the switch in Settings, under Account.
  • Referrals: people you refer appear to you only as masked emails. The same applies to you in your referrer's account.

6. International transfers

Some providers above are based in the United States. Where your data leaves the UK or EEA, we rely on appropriate safeguards such as adequacy regulations, the UK International Data Transfer Addendum or EU Standard Contractual Clauses, or the provider's certification under the UK-US data bridge or the EU-US Data Privacy Framework.

7. Cookies and local storage

We use only what is needed to run the Service, and nothing that tracks you across other sites:

  • Login cookie (set by Privy): keeps you signed in. Essential.
  • Staff cookie: only on our internal admin pages, for our team. Essential.
  • Referral code: if you arrive through a referral link, the code is held in your browser's session storage until you create an account, when it is recorded with your account so the referrer is credited. It is not written to a cookie and is discarded if you leave without signing up.
  • Local storage: your preferences and dismissed notices, kept in your own browser and never sent to us.

We do not use advertising or analytics cookies, and there is no cookie banner because there is nothing to consent to.

8. Security

Data is encrypted in transit (TLS). Sensitive keys on our servers are encrypted. Access to our systems is restricted and uses key-based login, and our key on your wallets is limited by wallet policy (see the Terms, section 4). No system is perfectly secure, but we work to protect your data and will tell you and the relevant authority about a breach where the law requires.

9. How long we keep it

We keep your data while your account is open. You can delete your account at auspex-trade.com/delete-account: if you are signed in the request is confirmed at once, otherwise we email you a confirmation link so that nobody can request deletion for you. An automated process then runs, normally within a day and always within 30 days. It cannot proceed while the account still holds funds or open positions, in which case we email you to withdraw first. It removes your email, name, Telegram link, applications, alerts, preferences, device registrations, messages and your login with Privy, and emails you when done. We keep: (a) records of fees charged, withdrawals and signed transactions for up to six years, for accounting, dispute and fraud purposes, no longer linked to your name or email; (b) anonymised statistics that cannot identify you; (c) anything on a public blockchain, which cannot be deleted by anyone. Server logs expire after 30 days and encrypted database backups after 7 days.

10. Your rights

Under UK and EU data protection law you can ask to access, correct or delete your data, to restrict or object to how we use it, to receive it in a portable format, and to withdraw consent where we rely on it. You can download a copy of everything we hold about you from Settings, under Account, delete your account at auspex-trade.com/delete-account, and unsubscribe from product emails with the link in any of them. For anything else email support@auspex-trade.com. We will reply within one month. You can also complain to the UK Information Commissioner's Office (ico.org.uk) or your local data protection authority.

11. Children

The Service is only for people aged 18 or over. We do not knowingly collect data from anyone younger.

12. Changes

We will post any changes here with a new date, and for significant changes we will tell you in the app or by email.