Privacy Policy

1. Who we are

Celenbase (“we”, “us”) operates celenbase.xyz and the Celenbase software and is the controller of the personal data described here. Celenbase is being incorporated; the legal entity name and registered address will be added here when it is. For any privacy question or request, email us.

2. What we collect

When you join the early-access list

• Your email address and the role you select (trader, market maker, venue or investor).
• The time you signed up, your IP address and the referring page. We use these to prevent abuse and to let us know about your sign-up.

When you write to us

• Your email address and whatever you choose to include in your message.

When you use the software, after launch

• Account details such as your email address and plan.
• The venue API or session keys you connect, stored encrypted and never logged.
• The settings you choose and the activity the engine performs for you: quotes, cancels, fills, rewards and markout. We need this to run the engine and to show you your dashboard.
• Billing details for paid plans, processed by Stripe. We do not store full card numbers.

3. What we do not collect or do

• We never take custody of your funds and never ask for keys that can withdraw them.
• We do not sell or rent personal data.
• We do not use advertising cookies or third-party advertising trackers on this website.

4. How we use data

• To manage the early-access list and email you when your seat opens.
• To run the engine in your account under your settings, and to show you your results.
• To answer your messages and provide support.
• To keep the Service secure, prevent abuse and meet legal obligations.

Where the law requires a legal basis, we rely on your consent (the early-access list), on performing our contract with you (the software), and on our legitimate interest in keeping the Service secure.

5. Who processes data for us

• Resend sends our emails and stores the early-access list.
• Cloudflare hosts the website and protects it from abuse.
• Stripe processes payments for paid plans.
• Venues you connect receive the orders you authorise the engine to place, under their own privacy policies.

These providers may process data outside your country. Where required, transfers rely on appropriate safeguards such as standard contractual clauses.

6. How long we keep data

• Early-access list entries: until you ask us to remove you, or until beta onboarding is complete.
• Sign-up notification emails, which include the IP address and referring page: deleted within 12 months, or sooner on request.
• Account and activity data: while your account is open, then deleted within 90 days unless the law requires us to keep it longer.
• Connected keys: deleted as soon as you disconnect a venue or close your account.

7. Your rights

Depending on where you live, you can ask to access, correct, export or delete your personal data, or object to how we use it. Just email us and we will respond within 30 days. You can also complain to your local data protection authority.

8. Security

We use encryption in transit and at rest, limit access to people who need it, and never log connected keys. No system is perfectly secure. If a breach affects your data, we will tell you without undue delay.

9. Children

The Service is not for anyone under 18, and we do not knowingly collect their data.

10. Changes

We will post any update here and change the date at the top. If a change is material, we will email you before it takes effect.