Privacy Policy

Cedar ("we", "our", or "us") operates the Cedar platform and related services. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, API, dashboard, and related services (collectively, the "Service").

By accessing or using the Service, you agree to this Privacy Policy. If you do not agree with the terms of this policy, please do not access the Service.

Account Information: When you create an account, we collect your email address, name, and authentication credentials (including third-party OAuth tokens from Google, GitHub, or crypto wallet addresses).

Usage Data: We automatically collect information about how you interact with the Service, including API call logs, trading activity metadata, IP addresses, browser type, and device information.

Wallet Information: If you use Cedar's embedded wallet feature, we store wallet addresses associated with your account. Private keys are managed through MPC (Multi-Party Computation) and are never stored in plaintext.

Communication Data: If you contact us, we may collect your name, email, and the content of your messages.

We use the information we collect to:

• Provide, maintain, and improve the Service
• Process and execute trading operations on your behalf
• Manage your account and provide customer support
• Monitor and analyze usage patterns and trends
• Detect, prevent, and address fraud, abuse, and technical issues
• Comply with legal obligations and enforce our terms
• Send you technical notices, updates, and administrative messages

We do not sell your personal information. We may share information in the following circumstances:

• Service Providers: With third-party vendors who assist in operating the Service (e.g., cloud hosting, analytics, authentication providers)
• Exchange Partners: Minimal information necessary to execute trades on connected exchanges, as directed by you
• Legal Requirements: When required by law, regulation, or legal process
• Business Transfers: In connection with a merger, acquisition, or sale of assets

We implement industry-standard security measures to protect your information, including encryption in transit (TLS) and at rest, access controls, and regular security audits. MPC wallet keys are distributed across multiple secure enclaves and are never reconstructed in a single location.

However, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

We retain your personal information for as long as your account is active or as needed to provide the Service. We may also retain certain information as required by law or for legitimate business purposes (e.g., fraud prevention, analytics).

Trading activity logs and API usage data are retained for a minimum of 12 months for compliance and audit purposes.

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate data
• Request deletion of your data (subject to legal retention requirements)
• Object to or restrict certain processing activities
• Data portability — receive your data in a structured format

To exercise these rights, contact us at [email protected].

We use essential cookies for authentication and session management. We may also use analytics cookies to understand how the Service is used. You can control cookie preferences through your browser settings.

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy, contact us at [email protected].