NOTEG BOT · EFFECTIVE DATE: 17 JUNE 2026
Controller
Alain D.S.L., operating as Posada.io.
Contact: support@posada.io.
Scope
This policy covers the NoteG Bot Android and iOS mobile application ("the App"). It does not cover the website subscribe.posada.io, which has its own terms.
1. Data We Collect
1.1 Data collected by the App
The App does not collect personal data in the conventional sense. It stores the following data locally on your device only:
- Bot host URL or IP address you enter during setup.
- A device label (defaults to the literal string "operator-pixel", not your actual device model).
- A hardware-backed ECDSA-P256 cryptographic key pair generated on your device. The private key is stored in the Android Keystore / iOS Secure Enclave and never leaves the device. Only the public key is transmitted.
- Your bot's public key, name, and Cardano wallet address (received from your bot during pairing).
- Cached API responses from your own bot (trading status, balance data).
- An onboarding completion flag and locale preference.
No name, email address, phone number, location, device identifier (IMEI, advertising ID, Android ID), contacts, photos, microphone input, or biometric data is collected by the App.
1.2 Camera
The App requests camera permission solely to scan the pairing QR code displayed by your NoteG Bot. The camera image is processed on-device and is never saved or transmitted.
1.3 Data collected at checkout
Your email address is collected on the website subscribe.posada.io when you purchase a subscription. This occurs in your system browser, not inside the App, and is governed separately.
2. How Data Is Used
The data stored on your device is used only to operate the App: establishing a secure connection to your bot, displaying trading status, and authenticating commands you send to your bot.
We do not use your data for advertising, profiling, analytics, or any purpose other than operating the service you subscribed to.
3. Data Transmission
The App transmits data to two destinations only:
- Your own NoteG Bot tenant, hosted on Posada-operated infrastructure (Hetzner, Germany). Traffic includes: your device public key (during pairing), a device label, ECDSA signatures for command authentication, and trading control or status requests. No personal identifiers are included.
- subscribe.posada.io — opened in your system browser for the initial walkthrough only. The App sends no data to this URL directly.
Local network connections (e.g. http://192.168.x.x:8517) use plaintext HTTP. Remote connections use HTTPS. Local traffic is protected by signed-envelope authentication on every request.
No data is transmitted to any advertising network, analytics provider, or third party.
4. Data Retention
All data stored by the App lives on your device. You can delete it at any time by uninstalling the App or clearing App data in your device settings.
Pairing data stored on your bot tenant (your device public key and label) can be removed by unpairing the device through the App or by contacting support@posada.io.
5. Third-Party SDKs and Services
The App contains no third-party analytics, advertising, or crash-reporting SDK. There is no Firebase, Google Analytics, Meta SDK, or equivalent. The App makes no network request to any party other than your own bot tenant.
6. Children
The App is not directed at children under 13 (or under 16 in the European Economic Area). We do not knowingly collect data from children.
7. Your Rights
Depending on your jurisdiction you may have the right to access, correct, or delete data held about you, or to object to its processing. To exercise any right, contact support@posada.io. We will respond within 30 days.
If you are in the European Economic Area or United Kingdom, you may lodge a complaint with your local data protection authority.
8. Security
Authentication between the App and your bot uses hardware-backed ECDSA-P256 signatures. The private key is generated on your device and never transmitted. Remote connections are encrypted with TLS. Local network connections are protected by signed-envelope authentication.
9. Changes to This Policy
We will post any material changes to this policy at posada.io and update the effective date. Continued use of the App after a change constitutes acceptance of the revised policy.
10. Contact
Alain D.S.L.
Posada.io
Email: support@posada.io