Security and operational boundaries
Limit exchange access and keep funds with your exchange.
Security starts with clear boundaries. BotTradesForYou needs supported trading access to execute a configured strategy, but it does not need withdrawal permission and does not custody your exchange funds.
Funds remain in the exchange account
BotTradesForYou sends supported trading instructions through exchange APIs. Deposits, withdrawals, and custody stay with the connected exchange and account holder.
Use the least exchange permission possible
Create separate credentials for bot trading, leave withdrawal access disabled, and use additional exchange-side restrictions when available. Review permissions periodically and revoke keys you no longer use.
API credentials are encrypted at rest
Stored exchange credentials are protected with AES-256-GCM and are not intended to be displayed again after setup. No system can promise absolute security, so account-side controls remain important.
Bot processes are separated and monitored
Managed bot processes use user separation, health checks, and lifecycle controls. Operational monitoring reduces unnoticed failures but cannot eliminate exchange outages, network faults, or market risk.