Privacy Policy

Last updated: 18 April 2026

This Privacy Policy explains what information T7 Pilot (operated by T7 Systems, "we", "us", "our") collects when you use the bot on Telegram, how we use that information, and the choices you have. We keep this short on purpose — the bot collects very little, by design.

1. What we collect

When you interact with the bot, we store:

• Your Telegram user ID (a numeric identifier) and, if public, your Telegram username. We do not see your phone number, email, or any other identifying Telegram metadata.
• Your bot-generated wallet address(es) (the public key) and the encrypted private key(s). The private key is encrypted at rest with per-user key material; we never store plaintext keys anywhere on disk.
• Your trading state: open positions, active take-profit / stop-loss / trailing-stop orders, active DCA plans, and fee ledger entries. Trading history beyond that is visible on the Solana blockchain to anyone.
• Your preferences: slippage setting, priority fee mode, MEV preference, buy/sell presets, and auto-attach TP/SL configuration.
• Your referral relationships: if you were invited by another user via a referral link, or if you have referred others, we store the link between Telegram IDs.
• An append-only audit log of security-relevant events (trades, deposits, withdrawals, exports, admin actions, failures). This is retained for security and debugging purposes.

2. What we do NOT collect

• We do not collect your email address, phone number, name, postal address, date of birth, or any KYC-style identity information.
• We do not collect payment card data. The platform fee is settled on-chain in SOL.
• We do not use cookies, web beacons, or device fingerprinting. The bot has no browser frontend.
• We do not track you across third-party sites or apps.
• We do not record IP addresses beyond what Telegram provides (we do not receive your IP from Telegram's bot API).
• We do not attempt to identify the real-world person behind a Telegram account.

3. How we use what we collect

Your data is used strictly to operate the service:

• Execute the trades you ask for, route them through Jupiter, and settle them on-chain.
• Run your automation (TP/SL, trailing stops, DCA, copy trades) in the background.
• Collect platform fees on successful trades and credit any referral rebates.
• Enforce rate limits and cooldowns on sensitive operations (withdrawals, key exports).
• Investigate abuse, bugs, or security incidents via the audit log.
• Respond to your support questions if you contact us.

We do not sell your data, we do not share it with advertisers, and we do not build behavioral profiles for third parties.

4. Third-party services

T7 Pilot needs to interact with several external services to function. Each has its own privacy policy, which we encourage you to read:

• Telegram (messaging layer, user account). The bot cannot function without Telegram. See telegram.org/privacy.
• Solana blockchain (trade settlement). Every trade is a public on-chain transaction visible to anyone. Wallet addresses are pseudonymous but permanent.
• Jupiter Aggregator (swap routing). We send quote and swap requests to Jupiter's public API; they see your wallet address and the tokens you trade.
• Alchemy (Solana RPC provider). Used for on-chain reads and transaction submission.
• RugCheck (public token safety API). Queried for token risk scores; no user-identifying information is sent.

We are not responsible for the privacy or security practices of these third parties. In the unlikely event that one of them is compromised, your on-chain activity may become correlated with your wallet address.

5. Data retention

• Wallet and trading state are retained for as long as you use the service. You can empty your wallet with /withdraw and export the private key with /export at any time.
• Audit log entries are append-only and retained indefinitely for security investigation. We do not delete audit entries on request; if we did, a compromised account could erase its own trail.
• Encrypted private keys remain on our server until you request deletion of your account. Because the keys are encrypted, a stale record with no associated activity carries minimal residual risk.
• Backups of encrypted data may exist for disaster-recovery purposes and are destroyed or overwritten on our normal rotation schedule.

6. Your rights

You have the following rights with respect to your data:

• Access. Run /status, /positions, /orders, /mydcas, or /rebates to see the data associated with your account.
• Portability. Use /export to retrieve the private key of your active wallet. This gives you full control over the on-chain assets; you can import the key into any Solana wallet and walk away from our service.
• Correction. Most preferences are adjustable via /settings.
• Deletion. You can request deletion of your Telegram-ID-linked data by contacting support. We will delete your preferences, tracked wallets, referral links, open orders, and encrypted wallet rows. We retain audit log entries and on-chain transaction records; neither contains data beyond a Telegram ID and public wallet addresses.
• Restriction. You can stop our automation at any time via /stopcopytrade, /cancelorder all, and /canceldca all.

If you are in the European Union, the United Kingdom, California, or another jurisdiction that provides specific data-subject rights, those rights apply in addition to the above. Contact us to exercise them.

7. Security

We take reasonable precautions to secure your data. Encryption keys are stored encrypted at rest with per-user key material. Sensitive operations are rate-limited and audit-logged. Server access is restricted to named operators. The detailed security posture is documented internally and reviewed periodically.

That said, no system is perfectly secure, and the bot holds the private keys needed to trade on your behalf. A server compromise could result in the loss of the funds held in your bot-managed wallet (but not your main wallet — which the bot has no access to). We encourage you to withdraw excess profits regularly and to never deposit more than you are comfortable losing. See the Terms of Service for the full risk disclosure.

8. Children

T7 Pilot is not directed at, and must not be used by, anyone under 18 (or the local age of majority, whichever is greater). We do not knowingly collect data from minors. If we learn that we have, we will delete the relevant records promptly.

9. International users & data residency

Our servers are located in Germany (Nuremberg) — within the European Union. Your data is stored and processed under EU law and the General Data Protection Regulation (GDPR), one of the strongest data-protection frameworks in the world.

If you access the bot from outside the EU, you are transferring your data into the EU. This is generally protective for you regardless of your home jurisdiction. If you are in the European Union, the United Kingdom, Switzerland, Canada, California, Brazil, or another jurisdiction that gives data subjects specific rights (access, portability, deletion, correction), those rights apply here — contact us to exercise them. We do not transfer your data to any third party for marketing purposes, and we do not sell it.

Because we hold the private keys needed to execute your trades, we cannot obscure the underlying activity: every swap is publicly visible on the Solana blockchain to anyone with your wallet address. That's a property of trading on a public blockchain, not a choice of server location.

10. Changes to this Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of the page reflects the most recent change. Material changes will be announced in the T7 Pilot community group. Continued use of the service after a change takes effect constitutes your acceptance.

11. Contact

For privacy questions, data requests, or security reports, reach out in the community group: @T7PilotChat.