Privacy Policy
Last updated: July 2026
Introduction
Simmerliq ("we", "our", or "us") operates TREAL. This Privacy Policy explains how we collect, use, store, and protect information when you use the TREAL website, intelligence dashboard, terminal, Telegram integrations, and related services (collectively, the "Service"). By using the Service, you accept this Policy and our Terms of Service.
TREAL provides market intelligence and tools for informational purposes only. We are not responsible for trading losses or other financial outcomes resulting from your use of the Service. See our Terms of Service for full disclaimers and limitation of liability.
1. Information We Collect
1.1 Account information
When you register or sign in, we receive account data from our authentication provider (Supabase), such as your email address, user ID, and profile metadata from OAuth providers you choose (e.g. Google, Apple, Facebook). We use this to identify your account and manage premium status.
1.2 Premium & subscription data
We store premium entitlement on your profile, including expiry dates and the source of premium (e.g. crypto payment, Telegram redemption, mobile in-app purchase). This lets us grant and verify access to dashboard modules, terminal features, and Telegram channels.
1.3 Payment metadata
For crypto checkout, we record order identifiers, invoice IDs from NOWPayments, price amounts, payment status, and optional reference codes in our crypto_payments table. We do not receive or store your wallet private keys or seed phrases.
1.4 Desktop & terminal sessions
If you use the desktop app or connect a terminal session, we may store encrypted refresh tokens and session metadata (e.g. device identifiers) to keep you signed in securely. Exchange API keys for trading are encrypted locally on your device or in-browser — they are not stored in plaintext on TREAL servers.
1.5 Portfolio & preferences
You may optionally save portfolio token selections and dashboard preferences. This data is linked to your account to personalize embeds and modules you use.
1.6 Security & abuse prevention
We may log hashed IP addresses, redemption attempt counts, and checkout rate-limit events to prevent fraud, abuse, and automated scraping. We do not use this data for advertising profiling.
1.7 Technical & usage data
Standard server logs (timestamps, request paths, error traces) may be collected for reliability, debugging, and security. WebSocket session records may be retained for operational monitoring and cleanup.
2. Information We Do Not Collect
We do not sell your personal data. We do not store exchange trading credentials on our servers in plaintext. We do not require more personal information than needed to operate the Service.
3. How We Use Your Information
We use collected information to:
- Provide and maintain the Service, including premium access and dashboard embeds
- Process payments and confirm crypto checkout via NOWPayments webhooks
- Authenticate desktop and web terminal sessions
- Deliver Telegram premium access when you redeem eligible codes
- Detect abuse, enforce rate limits, and protect platform integrity
- Improve reliability, fix bugs, and develop new features
- Respond to support requests
- Comply with legal obligations
4. Sharing & Disclosure
We do not sell or rent your personal information. We may share data only when:
- Service providers — trusted vendors that help us operate the Service (hosting, auth, payments, analytics), under contractual confidentiality obligations
- Legal requirements — when required by law, court order, or to protect rights, safety, and security
- Business transfers — in connection with a merger, acquisition, or asset sale, with notice where required by law
5. Cookies & Similar Technologies
We use cookies and local storage for authentication sessions, site preferences, and security (e.g. Cloudflare Turnstile on premium redemption). You can control cookies through your browser settings; disabling them may limit sign-in or certain features.
6. Data Retention
We retain account and premium data while your account is active and as needed for legal, billing, and security purposes. Payment and redemption logs may be kept for audit and dispute resolution. When data is no longer required, we delete or anonymize it where feasible.
7. Security
We use industry-standard measures including encrypted connections (HTTPS), encrypted desktop tokens at rest, and access controls on backend systems. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.
You are responsible for securing your account credentials, devices, and any API keys you configure in the terminal.
8. Third-Party Services
TREAL relies on third parties including Supabase, NOWPayments, Telegram, exchange APIs, CoinGecko, Cloudflare, and RevenueCat. Each has its own privacy policy governing data they process. We encourage you to review those policies.
9. Your Rights & Account Deletion
Depending on your jurisdiction, you may have rights to access, correct, or delete personal data we hold. To request account deletion or data inquiries, contact support@treal.simmerliq.com. We will respond within a reasonable timeframe subject to legal retention requirements.
10. Children's Privacy
TREAL is not directed at children under 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us data, contact us and we will delete it promptly.
11. International Users
Your information may be processed in countries other than your own. By using the Service, you consent to transfer and processing in jurisdictions where our providers operate, subject to applicable safeguards.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will revise the "Last updated" date at the top of this page. Continued use after changes constitutes acceptance of the updated Policy.
13. Contact
Questions about this Privacy Policy? Email support@treal.simmerliq.com.