About this Policy

This Privacy & Security Policy describes how Aeon Intel ("AEON," "we," "us," or "our") collects, uses, discloses, and protects information when you visit aeonintel.pro (the "Website") or use our trading terminal, signal engine, market-maker monitoring, on-chain wallet tracking, and automated execution tools (collectively, the "Services").

Your use of the Services is also governed by our Terms of Service, incorporated here by reference. If you do not agree with this Policy, please do not use the Services.

What Data We Collect

Information you provide directly

• Account data — email address, username, and password (hashed, never stored in plaintext).
• Billing data — handled by our payment processor, PayFast; AEON does not store full card numbers on its own servers.
• Exchange API credentials you choose to connect (see Exchange Connections & API Key Security below).
• Support communications when you contact aintlsupport@gmail.com.
• User-configured settings — signal thresholds, watchlists, tracked wallets, and auto-trade parameters.

Information collected automatically

• Device and log data — IP address, browser type, operating system, timestamps, and pages viewed.
• Usage data — features used, signals viewed, and session activity within the terminal.
• Cookies and similar technologies (see Cookies & Tracking).

Exchange Connections & API Key Security

AEON's automated execution features require connecting an API key from your exchange account (e.g. Binance, Bybit, OKX). This is the most sensitive data AEON handles, and we hold ourselves to the following standard:

• Trade-only permissions requested. When connecting an exchange, we instruct users to generate an API key with trading permissions only — AEON Intel enforces this — accounts connected with withdrawal-enabled keys are flagged and trading is blocked until a trade-only key is used.
• Encryption. API keys are encrypted using AES-256-GCM at rest (a unique encryption key per deployment, never stored alongside the data it protects), and TLS in transit and are never displayed in plaintext after initial entry.
• Access control. decrypted key material is only ever used server-side by the trade-execution process. No endpoint — including admin tools — returns decrypted key material to any client; admin account views show only whether an exchange is connected and when, never the key itself.
• Revocation. You can disconnect and delete a stored API key from your account at any time; we recommend also revoking the key directly on the exchange.
• Third-party wallet extensions (e.g. MetaMask, WalletConnect) used for on-chain features are governed by those providers' own privacy and security practices, which we do not control.

We are not liable for losses resulting from API keys granted broader permissions than recommended, or from compromise of your exchange account credentials outside of AEON.

On-Chain & Public Blockchain Data

AEON's market-maker monitoring and on-chain watcher features process publicly available blockchain data — wallet addresses, transfers, mints, and burns on chains including Ethereum, Base, Arbitrum, Polygon, and Bitcoin. This data is public by nature. Where a wallet address can reasonably be linked to an identifiable individual or entity, we treat that linkage with the same care as other personal data under this Policy. We do not control, and are not responsible for, the accuracy of third-party attribution data (e.g. labeling a wallet as belonging to a specific market maker).

How We Use Data

• To operate, maintain, and improve the Services, including the signal engine, scalp cockpit, and monitoring tools.
• To create and manage your account and process billing.
• To execute trades you have explicitly configured via connected exchange APIs.
• To communicate service updates, security alerts, and (where you've opted in) product announcements.
• To detect, investigate, and prevent fraud, abuse, and security incidents.
• To comply with legal obligations and respond to lawful requests.

We do not sell your personal data. We do not use your account or trading data to train third-party AI models without your explicit consent.

How We Share Data

• Service providers who help us operate the Services — hosting, payment processing, customer support, email delivery, and analytics — under contractual confidentiality obligations. Current providers: PayFast (payment processing), Google Analytics (website analytics), Railway (application hosting).
• Exchanges, solely to execute the trades you configure, via the API connection you establish.
• Professional advisors such as lawyers and auditors, where necessary.
• Authorities, where required by law or to protect rights, safety, or property.
• Business transferees, in the event of a merger, acquisition, or sale of assets.

We do not share personal data with third parties for their own direct marketing purposes.

Cookies & Tracking

We use cookies and similar technologies for authentication (keeping you logged in), preferences, and — where enabled — analytics. Google Analytics. We do not currently respond to browser "Do Not Track" signals. You can control cookies through your browser settings; blocking essential cookies may prevent you from staying logged in.

Security Measures

We apply technical and organizational safeguards designed to protect your data, including TLS encryption in transit, AES-256-GCM encryption of exchange API credentials at rest, salted password hashing, role-based access controls for administrative functions, session revocation on password change or account suspension, and an internal audit log of administrative actions. No system is completely secure, and we cannot guarantee absolute security of data transmitted to us. If we become aware of a security incident affecting your data, we will notify affected users as required by applicable law.

Data Retention

We retain personal data for as long as necessary to provide the Services, comply with legal obligations, resolve disputes, and enforce our agreements. account and trade data is deleted within 7 days of account deletion, except where retention is required by law. You may request deletion of your account at any time via aintlsupport@gmail.com, subject to legal record-keeping requirements.

International Transfers

AEON is headquartered in South Africa. If you access the Services from outside that jurisdiction, your data may be transferred to, stored, and processed in a country with different data protection laws than your own. By using the Services, you consent to this transfer.

Your Privacy Rights

Depending on where you live, you may have rights to access, correct, delete, or export your personal data, and to object to or restrict certain processing. This includes rights under the EU/UK GDPR, California's CCPA, and South Africa's POPIA, among others. To exercise any of these rights, contact us at aintlsupport@gmail.com. We will respond within the timeframe required by applicable law.

We do not sell personal data, and we do not share personal data with third parties for their own direct marketing purposes — so there is currently no opt-out mechanism needed for either.

Children's Data

The Services are not directed to, and are not intended for use by, anyone under 18 years of age. If we learn we have collected personal data from someone under 18 without appropriate consent, we will delete it.

Changes to this Policy

We may update this Policy from time to time. Material changes will be reflected by updating the "Last updated" date above, and where appropriate, by direct notice to users.

Contact Us

Questions about this Policy or your data can be sent to aintlsupport@gmail.com.