Privacy Notice
Last updated: 2 October 2026
This notice explains what personal information Pere collects when you use the Pere website and console, why we use it, who we share it with, how long we keep it and the rights you have. It applies to visitors, people who create an account and account holders.
1. Who we are
Pere is automated trading software that runs on your own exchange account. Pere is operated by Greyknot Limited, which is responsible for your personal information (the "controller"). In this notice, "Pere", "we" and "us" mean Greyknot Limited. You can contact us at privacy@perebot.xyz.
2. What we collect
When you create an account
- Your email address and, if you give one, a display name.
- Your password. We never store the password itself: we keep only a one-way scrambled form of it (an Argon2id hash) that is used to check it when you sign in.
- Your account's status (for example, pending activation) and role, and when it was created and changed.
When you sign in and use the console
- A record of each signed-in session: when it started, when it expires, when it was last used, your browser's description of itself (user agent) and your IP address.
- Your IP address, kept with account emails we send (such as a password reset link) and with administrative actions on accounts.
- Messages and notices we show you in the console, and whether you have read them.
When you connect an exchange account
- The exchange API key and secret you provide. The secret is stored encrypted (AES-256-GCM); only a shortened, masked form of the key is shown afterwards.
- Details the exchange returns about the account: its identifier, environment (Demo or Live), type, the permissions of the key and its verification status. Pere refuses keys that allow withdrawals or transfers.
- The name you give the connected account.
When Pere trades for you
- Balances and the funds you assign to a Run, and the settings and duration you choose.
- Positions, orders, trades, fees, funding payments, results and the history and reports of each Run, read from and placed on your exchange account.
When you contact us or we contact you
- Emails about your account, such as a password reset or, if enabled, a link to verify your email address.
- Any correspondence you send us.
Technical information
- Our servers keep logs of requests (including IP address, time and the page or address requested) to run the service securely.
We do not use advertising, analytics or tracking services, and we do not buy information about you from others.
3. How we use it and why
We use your information only where we have a legal basis to do so. These are ours:
| What we do | Information | Lawful basis |
|---|---|---|
| Create and run your account, sign you in, activate your account | Account and sign-in information | Contract: we need it to provide Pere to you |
| Connect your exchange account and run the strategies you choose, show balances, positions, history and reports | Exchange connection and trading information | Contract |
| Keep accounts and the service secure: limit repeated sign-in attempts, detect misuse, keep an audit trail of administrative actions, investigate problems | Sign-in, technical and audit information | Legitimate interests: protecting you, other users and Pere |
| Send emails about your account (for example a password reset) | Email address | Contract |
| Keep or share information where the law requires it | As required | Legal obligation |
We do not use your information for marketing, and we do not sell it.
4. Cookies and your device
- Sign-in cookie. When you sign in, the console sets one cookie (
pere_session) to keep you signed in. It lasts up to 12 hours, can only be read by Pere's server and is sent only over secure connections. It is strictly necessary, so it does not require consent. - Preferences on your device. The console remembers three choices you make (the colour theme, whether balances are hidden and whether you want notifications) in your browser's local storage, and, until you close the tab, which notices you have dismissed. They stay on your device and are not sent to us.
- Notifications. If you turn on notifications, your browser asks your permission first. You can turn them off in your browser at any time.
- The public website sets no cookies and loads nothing from other websites. If you are signed in, it asks Pere's console whether you are, using the sign-in cookie your browser already holds, so it can show Open Pere instead of Sign in. Nothing else is shared.
5. Who we share it with
- Your exchange (currently Bybit). To trade on your account, Pere sends instructions and reads information through the exchange's API using the key you provide. The exchange processes that information under its own privacy notice.
- Service providers who run the servers Pere uses and, when we send account emails, deliver them. They act on our instructions.
- The Pere team, who can see account details to activate accounts, provide support and keep the service safe.
- Authorities, where the law requires it.
6. International transfers
Some of the organisations above, for example your exchange, may process information in other countries. You can ask us for more information about this at privacy@perebot.xyz.
7. How long we keep it
We keep personal information only as long as we need it for the purposes above:
| Information | How long |
|---|---|
| Account details (email, display name, account status) | While your account is open, then up to 6 years after it closes, so we can answer questions or claims about the trades made |
| Trading records (Runs, settings, positions, orders, trades, fees, results and reports) | While your account is open, then up to 6 years after it closes |
| Exchange API keys | Until you disconnect the exchange account or close your Pere account, then deleted within 30 days |
| Sign-in records (sessions, browser details and IP addresses) and account email links | 12 months |
| Server logs | Up to 90 days |
| Accounts that are never activated | Deleted 12 months after sign-up |
| The record of administrative actions on accounts | For as long as Pere operates: it is a security record that cannot be altered |
Sign-in sessions themselves expire after 12 hours. If the law requires us to keep something longer, we will.
8. How we protect it
We use measures including: passwords stored only as Argon2id hashes; exchange secrets encrypted at rest; secure, server-only sign-in cookies over encrypted connections (HTTPS); limits on repeated sign-in attempts; refusing exchange keys that could withdraw or transfer funds; and access to accounts limited to the Pere team. No system is completely secure, and we cannot guarantee the security of information sent over the internet.
9. Your rights
Depending on where you live, you may have the right to:
- ask for a copy of your personal information;
- have inaccurate information corrected;
- ask us to delete your information, or to restrict how we use it;
- object to our use of it based on legitimate interests;
- receive information you gave us in a portable form.
Some information may need to be kept even after a request, for example where the law requires it or to keep an accurate record of trades. To use any of these rights, contact us (section 11). We will respond as soon as we can, and within any time limit the law sets.
10. Other important information
- Who Pere is for. Pere is only for people aged 18 or over.
- Automated trading. Pere places trades automatically on your exchange account, within the strategy and settings you choose. Decisions about your Pere account, such as activation, are made by the Pere team, not solely by a machine.
- Subscriptions. We may charge a subscription fee for certain strategies. If we do, we will update this notice before collecting any payment information, to explain how it is handled.
- Changes. If we change this notice, we will update the date at the top and tell account holders about significant changes.
11. Contact and complaints
For any privacy question or request, email privacy@perebot.xyz.
If you are unhappy with how we handle your information, please tell us first so we can put it right. You may also have the right to complain to the data protection authority where you live.