Privacy policy

Last updated 13 October 2026. Covers www.cashilor.com and the Cashilor Android app.

Cashilor is a market research and trading education platform. Most of it works without an account. This page explains what we collect when you do use it, why, and what you can do about it.

What we collect

• When you sign in with Google: your name, email address and profile picture. We never see your Google password.
• When you sign in with a crypto wallet: your public wallet address. Signing in signs a free message and never moves funds.
• Your member id: a permanent id (like CSH-XXXXXX) given on first sign-in.
• Membership: your plan, its dates and payment records. Payments are made in crypto through a payment processor; we receive the confirmation, not your wallet keys.
• If you connect an exchange for auto deploy: the API key and secret you enter, stored encrypted (AES-256-GCM), and the trades placed with them, your balance and results, so your dashboard can show them. Use keys with withdrawals switched off.
• If you join the community: your Telegram or Discord user id, to let you into the rooms your membership includes.
• Things you save: your watchlist, arcade progress and settings.
• Usage: pages visited, the device and browser type, and how pages are used (clicks and scrolling), to find what is confusing and fix it.

Why

To sign you in, run the membership and the services it includes, place the trades you asked the bots to place, send the emails that go with your account (welcome, receipts, renewal reminders), keep the platform secure, and improve it. We do not sell your data, and there is no advertising on Cashilor.

Who it is shared with

Only the services that run Cashilor, each for its own part:

• Vercel (hosting) and Upstash (database)
• Google, for Google sign-in
• Our crypto payment processor, for membership payments
• Zoho ZeptoMail, to send account emails
• Vercel Analytics and Microsoft Clarity, for usage statistics and page recordings that show how pages are used
• Telegram and Discord, when you link them
• The exchange you connect, when the bots trade for you

We share data with authorities only when the law requires it.

On your device

Your sign-in is kept on your device (browser storage), not in a cookie. The Android app asks for no special permissions. When you share a picture from the app, it is saved to the app's own temporary storage only long enough to hand it to the app you share it with.

How long we keep it

For as long as you have an account. When you delete it, your data is removed within 30 days, except payment records, which are kept for as long as accounting law requires.

Your choices

• Ask for a copy of your data, or for it to be corrected, by emailing us.
• Disconnect your exchange at any time from the bots pages, which deletes the stored keys.
• Delete your account from the app or the website.

Age

Cashilor is for adults. It is not meant for anyone under 18.

Contact

Questions about privacy: hello@cashilor.com. If this policy changes, the date at the top changes with it.