Last updated: March 23, 2026

Welcome to Renolab AI (the "Platform", "we", "us"). The Platform is operated by Magellan Digital Technology Co., Ltd. (Unified Business No. 90703038; registered address: 11F, No. 1-2, Sec. 5, Zhongxiao E. Rd., Xinyi Dist., Taipei). Renolab AI is an AI SaaS service (a subscription-based automated order-placement software): based on the strategies and parameters you configure yourself, it places lending offers automatically through the Bitfinex API key you provide. The Platform does not directly hold your digital assets or funds; the API key has order-placement permission only and no withdrawal permission.

This Privacy Policy explains how we collect, process, use, and protect your personal data. By using the Platform's services, you indicate that you have read, understood, and agreed to the contents of this Privacy Policy. If you do not agree with any part of this Policy, please stop using the Platform's services.

1. Data Collection

A. Categories of personal data collected

We may collect the following categories of personal data:

Account information: When you register an account, we collect your email address and password (stored in encrypted form). If you sign in via Google OAuth, we will obtain the public information of your Google account (such as your name and email address).
API key information: When you connect your Bitfinex account, we collect the Bitfinex API Key and API Secret you provide. These keys are stored using AES encryption and are decrypted only when lending operations are carried out.
Automatically collected data: When you use the Platform, we automatically collect the following technical information:
- IP address
- Browser type and version
- Device type and operating system
- Access time and date
- Referring page (Referrer)
Usage data: Including records of your activity on the Platform, such as bot settings, lending preferences, page view history, and feature usage.

B. Purposes of collection

We collect the data described above for the following purposes:

To provide, maintain and improve the automated lending services of this platform
To verify your identity and manage your account
To perform lending operations on Bitfinex using the API key you provide
To generate lending performance reports and statistics
To communicate with you about service updates, security notices and customer support matters
To detect, prevent and address technical issues or unauthorized activity
To comply with applicable laws and regulations

2. Processing and Use of Personal Data

Purpose of use

We process and use your personal data only within the scope of the collection purposes described above. Your Bitfinex API keys are used solely to submit order instructions according to the parameters you configure (such as submitting lending offers, querying offer status, and cancelling offers), and never for any other trading or withdrawal operations.

Parties with whom data is shared

We do not sell your personal data. We may share data with third parties in the following circumstances:

Bitfinex exchange: We interact with Bitfinex using the API keys you provide in order to carry out lending operations.
Cloud service providers: Infrastructure providers used for server hosting and data storage.
Analytics providers: Help us analyze how the Platform is used and improve service quality.
Payment service providers: For online credit card payments, our U.S. affiliate Proactive AI SaaS LLC acts as the merchant of record and processes payment data through Stripe; the Company does not store your full credit card number.

Data retention period

We retain your personal data for as long as your account exists and for the period necessary for the purposes of the service. After you delete your account, we will delete or anonymize your personal data within a reasonable period, except for data we are required by law to retain. API key data is deleted immediately when you disconnect Bitfinex or delete your account.

Data storage location

Your personal data is stored on servers located in Taiwan. We may transfer data to other regions for technical reasons, but will ensure that those regions have appropriate data protection measures in place.

Method of processing

We process your personal data by electronic means and adopt appropriate technical and organizational measures to protect data security. All data transmission takes place over encrypted HTTPS connections.

3. Storage and Protection of Personal Data

We take the following security measures to protect your personal data:

API key encryption: Your Bitfinex API Key and API Secret are encrypted with the AES symmetric encryption algorithm before being stored in our database, and are decrypted only when an API call needs to be made. Encryption keys are managed separately from the database.
Password security: User passwords are processed with an industry-standard one-way hashing algorithm, so plaintext passwords cannot be recovered even in the event of a data breach.
JWT authentication: We use JSON Web Tokens with RS256 asymmetric encryption for identity verification, ensuring the security of the authentication process.
Transport encryption: All communication between users and our servers is encrypted with TLS/SSL.
Access control: Only authorized personnel may access our servers and databases.
Regular security reviews: We regularly review and update our security measures to address emerging threats.

Although we do our utmost to protect your data, no method of transmission over a network or method of storage can guarantee absolute security. In the event of a data security incident, we will notify affected users as required by law.

4. Third-Party Analytics and Advertising

We may use third-party analytics tools (such as Google Analytics) to understand how users use the Platform. These tools may collect your usage data through cookies or similar technologies, including:

Page views and time on page
User interaction flows
Device and browser information
Geographic location (country/city level)

This data is processed in an anonymized or de-identified form and is used only to improve service quality and the user experience. We do not currently use third-party advertising services. If advertising features are introduced in the future, we will update this Privacy Policy and notify users.

5. Disclosure of Data

We may disclose your personal data in the following circumstances:

Legal compliance: Where we believe in good faith that disclosure is necessary to comply with a legal obligation, a court order, or a lawful request from a government authority.
Corporate changes: If the Company undergoes a merger, acquisition, sale of assets, or reorganization, your personal data may be transferred to the relevant party as part of the transaction assets. We will notify you before any such transaction is completed.
Security and fraud prevention: To protect the rights, property, or safety of the Platform, its users, or the public, and to prevent fraud or other unlawful conduct.
With your consent: Where we have obtained your explicit consent, we may provide data to specific third parties.

6. Your Choices and Rights Regarding Personal Data

Under Taiwan's Personal Data Protection Act and related regulations, you have the following rights:

Right to inquire and review: You have the right to inquire about and review the personal data we hold about you.
Right to rectification: If your personal data is inaccurate or incomplete, you have the right to request correction or supplementation.
Right to erasure: You have the right to request deletion of your personal data. You can delete your account through the Platform settings, or contact us for assistance. After your account is deleted, the associated API keys and personal data will be permanently removed.
Right to stop processing or use: You have the right to request that we stop collecting, processing, or using your personal data.
Withdrawal of consent: You may withdraw consent you have previously given at any time. Withdrawing consent does not affect the lawfulness of processing carried out on the basis of that consent before its withdrawal.
API key management: You can delete your stored Bitfinex API keys at any time on the Platform's settings page, which immediately stops the automated lending service.

To exercise the rights above, please contact us using the contact information below. We will respond to and process your request within fifteen business days of receiving it.

7. Cookie Policy

What cookies are

Cookies are small text files that a website stores on your device to record your preferences and usage information.

Types of cookies we use

Essential cookies: Cookies required to keep you signed in and to ensure the Platform works properly. Disabling these cookies will make the Platform's core features unusable.
Analytics cookies: Help us understand how users use the Platform (such as page views and navigation paths) so we can improve service quality. This data is collected anonymously.
Preference cookies: Record your personal preferences (such as interface language and display preferences) to provide a more personalized experience.

Managing cookies

You can manage or disable cookies through your browser settings. Most browsers allow you to:

View stored cookies
Delete individual cookies or all cookies
Block third-party cookies
Set cookies to be deleted automatically when they expire

Please note that disabling essential cookies may affect the normal functioning of this platform.

8. Contact Us

If you have any questions or comments about this Privacy Policy, or wish to exercise your rights regarding your personal data, you are welcome to contact us in the following ways:

Company name: Magellan Digital Technology Co., Ltd.
Unified Business Number: 90703038
Address: 11F., No. 1-2, Sec. 5, Zhongxiao E. Rd., Xinyi Dist., Taipei City, Taiwan
Email: Support@RenoLab.TV
Website: ai.renolab.tv

This Privacy Policy may be revised from time to time in response to changes in law or adjustments to our services. The revised policy will be published on the Platform and takes effect immediately upon publication. We recommend that you review this Policy periodically to stay informed of its latest contents. If a revision involves material changes, we will notify you by email or through a notice on the Platform.