API Key Usage Policy

Security Responsibility

You are responsible for maintaining the confidentiality of your API keys. By connecting your exchange account to T1 Bot®, you:

• Acknowledge possession of valid API credentials
• Confirm you have read-write permissions configured
• Accept liability for unauthorized use
• Agree to immediately disconnect if compromised

Encryption & Storage

T1 Bot® encrypts all API credentials with AES-256-GCM encryption and stores them securely. However, we cannot guarantee absolute security against all attacks. Assume your keys may be compromised at any time.

Limited Permissions

We recommend creating exchange API keys with minimal permissions:

• Trading enabled only (no withdrawal)
• Specific trading pairs only if possible
• IP whitelist your T1 Bot® server (if available)
• Daily spending limits on the exchange

Immediate Disconnection

You can disconnect exchange accounts immediately through your dashboard. Disconnection revokes T1 Bot®'s ability to trade but does not affect your exchange account or existing positions.

No Access to Withdrawals

T1 Bot® never has withdrawal permissions. Funds remain on your exchange account. We cannot and will not initiate transfers to external wallets.

Liability

T1 Bot® is not liable for losses resulting from compromised API keys, unauthorized access, or exchange hacks. Maintain your own security practices and monitor exchange notifications.

API Status Does Not Create Refund Eligibility

All completed payments are final and non-refundable. A missing, unconfigured, invalid, disconnected, unavailable, restricted, or non-functioning API key or exchange connection does not create eligibility for a refund, whether account activation is pending or complete.