01Who is responsible
Emad Qureshi, trading as Tredio, registered in Karachi, Pakistan, operates the website at tredio.bid and the app at app.tredio.bid and is responsible for the personal data described here. Contact us about privacy at contact@tredio.bid.
02The short version
- You do not give us a name, email address or phone number to use Tredio. We only have your email if you join the Mainnet waitlist, and we use it for nothing else.
- Your account is a passkey on your device. The passkey never reaches us.
- We identify you by your NEAR account ID, which is public, like every transaction your account makes.
- Notes and strategies in your vault are encrypted on your device. We only store ciphertext.
- This website uses no cookies, analytics or advertising trackers. See the cookie policy.
03This website
tredio.bid is a static marketing site. It sets no cookies, runs no analytics and loads no third-party trackers. Like any website, its hosting provider receives technical request data (IP address, browser type, page requested and time) to deliver pages and protect the service from abuse, and keeps it in short-lived server logs. Its only form is the Mainnet waitlist, which sends what you enter to the Tredio backend.
04What the app and backend store
When you use the app at app.tredio.bid, the Tredio backend stores the following:
| Data | Why | Kept |
|---|---|---|
| Account IDs: your NEAR account ID and the keys and grants it has authorised (trading sessions, Autopilot grants). | To sign you in, attach your rules, follows and posts to your account, and check its permissions. | While your account uses Tredio. |
| Sign-in tokens: short-lived tokens issued after your account key or session key signs a request. | To keep you signed in. Each request is re-checked against your account. Revoked tokens are recorded by their hash so they stop working. | Until they expire. |
| Follows and rules: accounts you copy-trade and their settings; Autopilot rules, backtests, grants, positions, orders and an audit log of what they did. | To run copy-trading and Autopilot for you and show you their history. | While your account uses Tredio. You can stop rules and follows at any time. |
| Push subscriptions: the push endpoint and keys your browser creates, and the topics you choose. | To send the notifications you turned on. | Until you turn notifications off or the endpoint stops working. |
| Vault: strategies and notes, sealed on your device with AES-GCM before upload. | To sync them across your devices. We store only ciphertext and cannot read it. | Until you delete them. |
| Social content: posts and calls you publish, with their signatures. | To show them in the feed. They are public to other users. | Until removed. |
| Links you submit for the radar to consider. | To review them as possible trends, with a model on NEAR AI Cloud. | As long as the radar needs them. |
| Faucet and activation records: account, amount and transaction of test-token drips; the IP address that asked to activate an account. | To share test tokens fairly and stop abuse of sponsored network fees. | Activation records expire; faucet records are kept to enforce limits. |
- Data
- Account IDs: your NEAR account ID and the keys and grants it has authorised (trading sessions, Autopilot grants).
- Why
- To sign you in, attach your rules, follows and posts to your account, and check its permissions.
- Kept
- While your account uses Tredio.
- Data
- Sign-in tokens: short-lived tokens issued after your account key or session key signs a request.
- Why
- To keep you signed in. Each request is re-checked against your account. Revoked tokens are recorded by their hash so they stop working.
- Kept
- Until they expire.
- Data
- Follows and rules: accounts you copy-trade and their settings; Autopilot rules, backtests, grants, positions, orders and an audit log of what they did.
- Why
- To run copy-trading and Autopilot for you and show you their history.
- Kept
- While your account uses Tredio. You can stop rules and follows at any time.
- Data
- Push subscriptions: the push endpoint and keys your browser creates, and the topics you choose.
- Why
- To send the notifications you turned on.
- Kept
- Until you turn notifications off or the endpoint stops working.
- Data
- Vault: strategies and notes, sealed on your device with AES-GCM before upload.
- Why
- To sync them across your devices. We store only ciphertext and cannot read it.
- Kept
- Until you delete them.
- Data
- Social content: posts and calls you publish, with their signatures.
- Why
- To show them in the feed. They are public to other users.
- Kept
- Until removed.
- Data
- Links you submit for the radar to consider.
- Why
- To review them as possible trends, with a model on NEAR AI Cloud.
- Kept
- As long as the radar needs them.
- Data
- Faucet and activation records: account, amount and transaction of test-token drips; the IP address that asked to activate an account.
- Why
- To share test tokens fairly and stop abuse of sponsored network fees.
- Kept
- Activation records expire; faucet records are kept to enforce limits.
The relayer that pays your network fees also keeps per-account and per-IP limits in memory. They reset when it restarts.
05The Mainnet waitlist
Tredio runs on NEAR testnet today. If you join the waitlist on this website or in the app, the Tredio backend stores:
- your email address;
- the Tredio account you chose to link, if you joined in the app while signed in and left “Link my Tredio account” on;
- when you joined (and when you last joined again), and whether you joined on the website or in the app;
- that you agreed to the launch email, and whether you were invited or unsubscribed;
- a keyed hash of the network address you joined from, used only to stop abuse of the form. The address itself is not stored.
Purpose. To email you when Tredio launches on Mainnet and to invite you to its beta. We send nothing before then, we do not add you to other lists, and we never sell or share your email for marketing.
Legal basis. Your consent, given by ticking the box when you join. You can withdraw it at any time.
Retention. Until the Mainnet launch and its beta invitations are done, and at most 12 months after the launch. We delete your entry sooner if you unsubscribe or ask us to.
Unsubscribe or delete. Every email we send has an unsubscribe link. To leave the list or have your entry deleted at any time, write to contact@tredio.bid from the address on the list.
The list is kept in the backend's database, run by our hosting provider. When we send the launch email, an email delivery service receives your address only to deliver it.
06What stays on your device
Some data never leaves your browser. It is listed in the cookie policy, and includes:
- your passkey, held by your device or password manager;
- your trading session key and the keys that open your vault, encrypted under non-extractable browser keys in IndexedDB;
- your sign-in token (session storage, cleared when you close the tab);
- your theme, notification topics, a local record of series you traded, and the email you joined the Mainnet waitlist with, if you did (local storage).
07Public transaction data
Your trades, balances and account settings are recorded on NEAR's public ledger and are permanent. Anyone can read them, and Tredio indexes them to build portfolios, track records, volumes and leaderboards. We cannot change or delete data on that ledger.
09Legal bases
Where data protection law such as the GDPR applies, we process data to provide the service you ask for (contract), to keep Tredio secure and prevent abuse (legitimate interests), to send notifications you turned on (consent, which you can withdraw at any time by turning them off), and to email you about the Mainnet launch if you joined the waitlist (consent, which you can withdraw at any time by unsubscribing).
10Your rights
Depending on where you live, you may have the right to access, correct, delete or export your personal data, to object to or restrict its use, and to complain to your data protection authority. To use them, write to contact@tredio.bid from, or with a signature by, the account concerned (for the waitlist, from the email address on it).
In the app you can delete vault items, turn off notifications, and stop Autopilot rules and follows at any time. Data on the public ledger cannot be deleted by anyone.
11Security and transfers
We encrypt data in transit, keep what we store to a minimum and seal private content on your device. Our providers may process data outside your country; where the law requires, we use appropriate safeguards for those transfers.
12Children
Tredio is not meant for children, and we do not knowingly collect data from them.
13Changes
We will update this policy when Tredio changes what it stores, for example before a mainnet launch. The date at the top shows the latest version.