This policy explains what the service stores about you, why, and for how long. It is deliberately short, because we collect deliberately little.
What we collect
Your username, a securely hashed password, your preferred interface language, the invitation code used at registration, and the trading accounts you choose to bind. An email address is optional and is never required to use the service.
What we do not collect
We never ask for or store your broker trading password, your broker investor password, or any withdrawal credential. We do not hold your funds and cannot move them.
Security and access data
We record login attempts, session identifiers, IP addresses and browser user-agent strings so that you can review active sessions and so that abuse can be investigated.
No email, no tracking mail
The service sends no verification email and no marketing email. There is no SMTP dependency and no email-based password recovery.
Cookies
We set a session cookie to keep you signed in and a language cookie (yi_locale) to remember your interface language for one year. Neither is used for advertising.
Payment data
Payment is made in USDT on the TRC20 network. We record the transaction identifier, the sending and receiving addresses, and the amount, because these are the evidence that a payment occurred. No card data is ever processed or stored.
Retention
Account, subscription and payment records are retained while your account exists and afterwards for as long as required to meet accounting and dispute-resolution obligations.
Your rights
You may request access to, correction of, or deletion of your personal data by contacting support. Deletion is subject to the retention obligations above.