Privacy Policy

Who we are

Yemcaster (“we”, “us”) is an independently operated online service. This policy explains what personal data we collect when you use yemcaster.com and the Yemcaster app, why we collect it, and what control you have over it.

What we collect

When you create an account: your email address, a display name, and a password (stored only as a one-way hash). If you sign in with Google, we receive your email and name from Google. If you sign in with a Solana wallet, we store your public wallet address.

When you pay: the blockchain transaction hash you submit, the wallet address it came from, and the amount. These are already public on the blockchain; we store them to verify and record your membership.

If you connect Telegram alerts: your Telegram chat ID, so alerts can be delivered to you privately.

If you use the Auto Trading Bot: the exchange API keys you provide. These are stored encrypted and used only to place and monitor the orders you have configured. We never ask for withdrawal permissions.

If you use the affiliate programme: your payout wallet address and a record of referred signups and their payments.

Automatically: your IP address and basic request data, used for security (login throttling, abuse prevention) and short-lived server logs. We use a first-party cookie to keep you signed in and, if you arrived via a referral link, a 60-day cookie recording that referral.

What we do not collect

• We do not collect card numbers or bank details — payments are on-chain and settle to our wallet directly.
• We do not run third-party advertising or tracking pixels on the app.
• We do not sell, rent, or share your personal data with anyone for marketing.

How we use it

• To run your account, verify payments, and deliver the alerts and features you have enabled.
• To send transactional email — password resets, payment confirmations, and replies to messages you send us. We do not send marketing email.
• To keep the service secure and detect abuse.
• To calculate and pay affiliate commissions where applicable.

Who else sees it

We use a small number of providers to run the service, each of which receives only what it needs: our hosting provider (server and database), Google (AI grading of public news headlines — your data is never sent to the AI), Google (sign-in, if you choose it), Telegram (alert delivery, if you connect it), and the public blockchain networks used for payment verification. The exchange you connect for auto-trading receives orders under your own API keys.

We will disclose data if required to by law, or to protect the rights or safety of our users or ourselves.

How long we keep it

Account data is kept while your account exists. Payment records are kept for as long as needed to evidence your membership history and meet accounting obligations. Server logs are rotated within days. If you delete your account, we remove your personal data within 30 days except where we are required to retain it.

Your rights

You can view and edit your profile in the app at any time. You can disconnect Telegram, remove exchange API keys, and change your payout wallet yourself. To request a copy of your data or deletion of your account, email us and we will respond within 30 days. If you are in the EU, UK, or another jurisdiction with data-protection law, you may also have the right to complain to your local supervisory authority.

Security

All traffic is encrypted in transit (HTTPS). Passwords are hashed. Exchange API keys are encrypted at rest. Login is rate-limited. Administrative actions on your account require additional authentication. No system is perfectly secure, and you should use a strong, unique password.

Children

Yemcaster is not directed at anyone under 18 and we do not knowingly collect data from minors. If you believe a minor has created an account, tell us and we will remove it.

Changes

If we change this policy in a way that affects you materially, we will note the new date at the top and, where practical, notify you in the app.