Privacy Policy

Effective: 2026-08-05

This policy explains what Value Connect Global Inc (BVI) collects when you use coinsori, stocksori, or soritrading, and how it is used. Contact: [email protected]. The English version governs.

1. What we collect

• Account data: email address, nickname, password (stored only as a salted hash), plan,

preferences (language, display currency).

• Content you provide: posts, comments, chat messages, uploaded images, strategy code and

notes, support tickets. Community content is machine-translated server-side so users can read it in their own language.

• Usage and technical data: logs (IP address, user agent, timestamps), pages viewed, and

security events — kept for operation, abuse prevention, and debugging.

• Trading-related data you choose to sync: run configurations, paper/live fill reports and

wallet snapshots sent by YOUR agent, backtest jobs and results. We never collect exchange API keys, private keys, or account passwords for exchanges. Remote agent control is end-to-end encrypted; the server relays ciphertext it cannot read.

2. What we do NOT collect

Payment card data (handled entirely by our merchant of record), exchange API keys or secrets, custody of any funds.

3. How we use data

To operate and improve the Service, translate community content, provide support, enforce our Terms, meet legal obligations, and send service notices. We do not sell personal data. We do not use your private strategy code for anything except running the features you invoke.

4. Sharing

Processors that help us run the Service (hosting, machine translation, email delivery, payment via merchant of record) receive only what they need. We may disclose data if required by law.

5. Optional third-party AI assistants (ChatGPT connection)

You may optionally connect your account to an AI assistant (e.g. the "SoriTrading Strategy Assistant" GPT inside ChatGPT) via OAuth. If you do: the assistant receives an access credential scoped to strategy development and backtesting only — it can create strategies, save code and notes, run backtests on your agent, and read those results. Content exchanged inside ChatGPT is processed by OpenAI under OpenAI's own privacy policy. Your exchange API keys, passwords, and any live-trading capability are never exposed to the assistant or to OpenAI — the connection cannot start live trading, deploy runs, or touch keys (those stay in the web UI, performed by you). The connection appears as a token named "ChatGPT" in your developer token list; delete it there at any time to revoke all access immediately.

6. Retention and deletion

Account data is kept while the account exists. You may delete your account; associated personal data is deleted or anonymized within a reasonable period, except records we must keep by law or for dispute resolution. Backups roll off on a fixed schedule.

7. Security

Passwords are hashed; strategy code is encrypted at rest; agent control channels are end-to-end encrypted; access to production data is restricted. No system is perfectly secure — report concerns to [email protected].

8. Your rights

Depending on your jurisdiction you may request access, correction, deletion, or export of your personal data: [email protected]. We respond within a reasonable time.

9. International transfers, children, changes

Data is processed on servers that may be located outside your country. The Service is not directed to children under 18. Material changes to this policy will be announced in the Service.