Privacy
policy.

This policy explains what data [Company legal name] (“Rebatally”) collects, why, and what you can do about it. The short version: we collect as little as we can to calculate and pay your payback.

The data controller is [Company legal name], [Registered address]. Privacy questions: [Privacy contact email].

From you:

• the exchange you use and your exchange UID;
• your payout destination (for example a USDT wallet address);
• contact details you choose to give us, such as an email address or chat handle.

From the exchange, under its partner programme, for UIDs registered with us:

• trading volume;
• trading fees paid;
• the referral status of the account.

From your browser: basic technical data such as IP address, device and browser type, and pages visited. [Describe analytics tools, if any].

To confirm a UID is yours we ask once for a read-only exchange API key. We use it only for that check, reject keys that can trade or withdraw, and do not store it unless you choose to keep it linked.

We never ask for, and never store:

• exchange API keys that can trade or withdraw;
• exchange passwords or two-factor codes;
• wallet seed phrases or private keys.

We keep only the ownership result of that check. We do not see your balances, open positions or trade history beyond the volume and fee totals the exchange reports to us. If anyone claiming to be Rebatally asks you for any of the above, it is not us.

• to match your UID to the fee data the exchange reports, and to calculate and pay your payback;
• to answer your questions and send notices about your payback or these policies;
• to detect abuse such as wash trading or duplicate accounts;
• to keep records we are legally required to keep;
• to understand, in aggregate, how the website is used so we can improve it.

Where data-protection law requires a legal basis, we rely on: performing our agreement with you (paying payback), our legitimate interests (preventing fraud, improving the service), legal obligations (record keeping), and your consent where we ask for it (for example optional marketing). [Confirm with counsel for each jurisdiction served].

• Exchanges, only to confirm that a UID is referred by us, as their partner programmes require;
• Service providers that host the website, process payouts or help us with support, under contracts that limit their use of the data: [List of processors];
• Authorities, when the law requires it.

We do not sell your data.

We keep your UID, payout details and payback history while your registration is active and for [Retention period] afterwards, to handle disputes and meet legal obligations. After that we delete or anonymise it.

We protect the data we hold with access controls and encryption in transit. Because we never hold passwords or API keys that can trade or withdraw, a breach at Rebatally cannot be used to trade on or withdraw from your exchange account. No system is perfectly secure, and we will notify you and the relevant authority of a breach where the law requires it.

Depending on where you live, you may have the right to access, correct, delete or export your data, to object to or restrict how we use it, and to withdraw consent. To use these rights, email [Privacy contact email].

Deleting your UID stops payback for that account. You can also complain to your local data-protection authority.

[Describe cookies and similar technologies used, or state that only strictly necessary cookies are used].

We may update this policy. The current version always lives on this page with its “Last updated” date, and we will tell registered users about material changes.