Legal

Privacy

Last updated 27 October 2026

What MyAlgo collects for myalgo.io and the Blackbox app at blackbox.myalgo.io, why, and who else sees it. We do not sell personal data and we do not show ads.

myalgo.io

• No cookies, no analytics and no advertising trackers.
• The page loads its fonts from Google Fonts, so your browser sends Google a request that includes your IP address.
• The page fetches the latest ranking from blackbox.myalgo.io. That request carries no account information.
• The site is served by Cloudflare, which processes each request (including your IP address) to deliver and protect it.

The Blackbox app: what we store

In short: your email address, your Telegram ID, exchange API keys (encrypted, trade-only) and automation logs. We never see or store card data: paid plans are crypto invoices only. In detail:

• Account. Your email address if you sign in or link an account by email; your Telegram ID and display name if you sign in with Telegram; your time zone and currency settings; your plan.
• Sessions. A session cookie that keeps you signed in. For each session we keep when it started and was last used, the IP address and the browser's user agent, so you can see your sessions in Settings and revoke them.
• Exchange API keys. Trade-only, and encrypted the moment they reach us; the website cannot decrypt them, only the order runner can. Alongside the encrypted key we keep its label and last four characters, plus what the exchange reports about it: permissions, IP list, expiry, account UID, VIP level and whether the account was opened through our referral link.
• Automation logs. Your automation settings, the orders we send to your exchange, and their results.
• Partner verifications. The exchange UID or account email you send for Pro via a partner, the screenshot if you add one, and the decision.
• API keys for AI agents. Only a hash of each key. Every request made with a key is recorded in an append-only log: time, path and result.
• Payments. For a paid plan, the crypto invoice: plan, network, stablecoin, amount, deposit address and the on-chain transaction. Blockchain transactions are public by nature.

Why

To sign you in, keep your account secure, run the automations you set up, verify partner-exchange referrals for free Pro, take payment, answer support requests and keep the service working. We do not use your data for advertising.

Who else sees it

• Your exchange receives the orders we place with your key.
• Partner exchanges: for Bybit, we look up the UID you give us in Bybit's affiliate records to confirm the referral. Other partner exchanges are checked by hand.
• Cloudflare hosts and protects both sites.
• Telegram handles Telegram sign-in; the owner receives partner verification requests there.
• Resend delivers sign-in emails if you use email.
• Google Fonts serves the fonts on myalgo.io.

We share data with others only where the law requires it.

Your choices

• Revoke sessions and API keys and remove exchange keys in Settings at any time. Removing an exchange key deletes it.
• To get a copy of your data or have your account deleted, email support@myalgo.io. We keep only what the law requires us to keep, such as payment records.

Changes

When this page changes, we update the date above.

Contact

Email: support@myalgo.io · Telegram: @lobsterkongbot · X: @KongBTC