Privacy Policy

enso operates the Service and is the controller responsible for the personal data described in this policy. This policy covers data we process when you visit our sites, create an account, deposit or withdraw funds, copy traders, trade, or otherwise interact with us. It does not cover third-party services that have their own privacy policies (see “Third parties we work with” below).

We collect the following categories of information:

• Information you provide. Your email address and basic profile details (such as your name) when you sign up, including through Google sign-in or a connected wallet; a Telegram handle and trading background if you apply to become a lead trader; and the contents of any support requests or other communications you send us.
• Account and wallet data. Because enso is custodial, we provision and operate one or more blockchain wallets on your behalf. We process your wallet addresses, balances, deposits, withdrawals, and the allowlisted addresses you approve for withdrawals.
• Trading and usage data. Records of the strategies you copy, positions, orders, fills, realized and unrealized results, fees, subscription status, and referral activity.
• Payment and on-ramp data. When you buy crypto with a card or bank transfer, our payment partner collects and processes the payment and identity information needed to complete and screen the transaction. We receive limited transaction status information, not your full payment details.
• Automatically collected data. Device and connection information (such as IP address, browser type, and operating system), log and diagnostic data, and information stored in your browser through cookies and similar technologies (such as local storage) that keep you signed in and keep the app working.

We do not hold your private keys in a way that lets us export them, and we never ask for your passwords to third-party services. We do not knowingly collect special categories of sensitive personal data.

We use your information to:

• create and secure your account and authenticate you when you sign in;
• provide the Service, including provisioning your wallet, moving your funds, and executing copies and trades you initiate;
• calculate and collect fees, and process deposits, withdrawals, and payouts;
• detect, investigate, and prevent fraud, abuse, security incidents, and other prohibited or illegal activity;
• provide customer support and respond to your requests;
• operate, maintain, debug, and improve the Service;
• send you service and transactional messages, and, where permitted, product updates you can opt out of; and
• comply with legal obligations and enforce our Terms of Service.

If you sign in with Google, we receive the basic profile information you approve, which is your email address and, where available, your name and profile picture. We use this data only to create and secure your enso account and to sign you in.

enso's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. We do not sell Google user data, we do not use it for advertising, and we do not share it with third parties except as needed to provide the Service (for example, our authentication provider) or as required by law.

We do not sell your personal data. We share information only in these cases:

• Service providers. With vendors who process data on our behalf to run the Service, under contracts that limit their use of the data (see the list below).
• To operate trades. With the exchange and infrastructure that execute your transactions on-chain, which is inherent to trading on a public blockchain.
• Legal and safety. When we believe disclosure is reasonably necessary to comply with a law, regulation, legal process, or lawful government request, or to protect the rights, property, or safety of enso, our users, or others.
• Business transfers. In connection with a merger, acquisition, financing, or sale of assets, in which case we will require the recipient to honor this policy or notify you of any material change.

To operate the Service, we share limited personal data with service providers that process it on our behalf, under contracts that restrict their use of it to providing their services to us. Each receives only the data needed for its role, and each has its own privacy policy. These providers fall into the following categories:

• Authentication and custodial wallet infrastructure, to sign you in and to create and operate the wallets used for your account.
• Trade execution and blockchain infrastructure, to place and settle the transactions you initiate.
• Payment and on-ramp providers, to process card and bank purchases and the related identity checks.
• Cloud hosting, data storage, and content delivery, to run and serve the Service.
• Security, fraud-prevention, and bot-protection, to keep accounts and sign-in secure.

You can ask us for more detail about the specific providers we use for a given purpose by contacting us at support@ensotrade.xyz.

Some transactions settle on public blockchain networks, which are decentralized and outside our control. Information recorded on a public blockchain is permanent and visible to anyone.

We use cookies and browser storage that are necessary to sign you in, keep your session, remember preferences, and keep the Service secure. We do not use them for cross-site advertising. You can control cookies through your browser settings, but disabling necessary storage may prevent parts of the Service from working.

We keep personal data for as long as your account is active and as needed to provide the Service. We may retain certain records for longer where required to meet legal, accounting, security, dispute-resolution, or regulatory obligations, or to enforce our agreements. Records written to a public blockchain cannot be deleted by us.

We use technical and organizational measures designed to protect your information, including encryption in transit, access controls, and a custody model in which the keys that place copy-trades cannot move your funds out. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. Keep your login credentials confidential and contact us immediately if you suspect unauthorized access.

Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your personal data, to object to or restrict certain processing, and to withdraw consent. You can exercise these rights, or ask questions about them, by contacting us at support@ensotrade.xyz. We will respond consistently with applicable law. Some data may be retained where we have a legal basis or obligation to keep it.

We and our providers may process your information in countries other than the one in which you live. Where we transfer personal data across borders, we take steps to ensure it remains protected consistent with this policy and applicable law.

The Service is not directed to anyone under 18, and we do not knowingly collect personal data from children. If you believe a child has provided us personal data, contact us and we will take appropriate steps to delete it.

We may update this policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, provide additional notice. Your continued use of the Service after an update means you accept the revised policy.

If you have questions about this policy or our privacy practices, contact us at support@ensotrade.xyz.