Privacy Policy
Last updated 5 August 2026
The short version: Shexon stores what it needs to show you your portfolio —
your account details, the exchange keys and wallet addresses you add, and the
balances read using them. It never holds your funds, never sells your data, and
never shares it for advertising.
What we collect
- Account — username, email address, and a password held by our identity provider (Keycloak). We never see your password.
- Exchange connections — the API key and secret you supply, encrypted with AES-256 before storage.
- Wallets — addresses you add. If you generate a wallet in Shexon, its private key is encrypted with AES-256.
- Portfolio data — balances, positions, orders and transfers read from those connections, so we can chart your history.
- Security logs — sign-in times, IP address and browser, so you can spot access you don't recognise.
What we don't do
- We don't sell or rent your data.
- We don't run advertising trackers or third-party analytics that profile you.
- We don't take custody of your funds, and we don't move them except on an instruction you give.
Who we share it with
Only the services needed to run Shexon: the exchanges and blockchain nodes you have connected, our email provider for account and alert messages, and Telegram if you choose to link it. Nobody else.
Where it lives
On our own servers, not a third-party analytics platform. Encryption keys are held in the server environment rather than in the database, so a copy of the database alone does not reveal your API keys.
Your choices
- Disconnect an exchange at any time — its stored keys are deleted immediately.
- Delete your account to remove your connections, wallets and history.
- Ask us what we hold about you, and we'll tell you.
Contact
Questions about privacy: open a support ticket inside the app, or email support@shexom.com.