Privacy Policy
Last Updated: March 2026
Coinstream is an automated crypto trading platform available as a Telegram Mini App and at coinstream.space. This policy explains how we handle your data — clearly and without legal jargon.
Coinstream is not affiliated with Telegram. Your interactions with Telegram are governed by Telegram's own Privacy Policy.
What data do we collect?
From Telegram:
Your user ID, username, first name, and language — shared automatically when you open the Mini App. We use this to create and identify your account.
From you:
Exchange API keys you provide to connect your trading accounts. We store them encrypted and use them only to execute trades. We never request withdrawal permissions.
Generated by the Service:
Bot configurations, trade history, portfolio data, and wallet addresses — everything needed to run your trading bots.
Automatically:
IP address, device type, and timestamps — for security and abuse prevention. We don't use tracking cookies or third-party analytics pixels.
What we don't collect:
Your real name, phone number, postal address, date of birth, or any personal identifiers beyond what Telegram provides.
Why do we need it?
- To run your trading bots and execute trades through integrated exchanges
- To manage funds via intermediate wallets during trade execution
- To keep the platform secure and prevent abuse
- To help you when you contact support
- To meet legal requirements where applicable
That's it. We don't use your data for advertising, profiling, or anything unrelated to the Service.
How do we handle your funds?
Your funds pass through Coinstream's intermediate wallets during trade execution. You can withdraw at any time — no locks, no delays, no minimum holding periods.
We don't have access to your exchange accounts beyond the API permissions you grant. All API keys are encrypted at rest and in transit.
Who can see your data?
Nobody gets your data for free. We don't sell, rent, or trade personal information.
We share limited data only with:
- Infrastructure providers (hosting, security) — under strict contracts, only to keep the Service running
- Exchange partners (including AsterDex) — trading data necessary to execute your orders. Blockchain transactions are public by nature
- Law enforcement — only when legally required
How long do we keep it?
| Data type | Retention |
|---|---|
| Account & trading data | As long as your account is active, plus a reasonable period for legal purposes |
| Exchange API keys | Deleted immediately when you disconnect an exchange or delete your account |
| Technical logs (IP, etc.) | Only as long as needed for security |
| Support messages | Until your request is resolved |
| Blockchain data | Permanent and public — we can't change or delete it |
What are your rights?
- See your data — request a copy of what we have about you
- Fix it — ask us to correct anything inaccurate
- Delete it — request full account deletion. We'll remove your data, API keys, and bot configurations. Some data may be kept where law requires it
- Export it — get your data in a machine-readable format
- Object — tell us to stop processing your data for specific purposes
Contact privacy@coinstream.space or @coinstream_support to exercise any of these rights.
How do we protect your data?
- API keys and wallet data are encrypted at rest and in transit
- Access controls limit who on our team can see what
- We monitor for unauthorized access and suspicious activity
No system is 100% secure, but we take commercially reasonable measures to protect your information.
Age requirement
Coinstream is for users 18 and older. If we learn a minor has created an account, we'll delete it.
Changes to this policy
We may update this policy. When we do, we'll update the date at the top. Continued use of the Service after changes means you accept the updated policy.
Questions?
- Email: privacy@coinstream.space
- Telegram: @coinstream_support
- Website: coinstream.space