Skip to content
Connecting market data
Connect wallet

Privacy policy

Last updated 7 October 2026

In short. You can use Rivemont without giving a name, an email address or an ID. We keep only what the app needs to work: your wallet address, your settings and the keys Rivemont uses on the exchanges you connect, stored encrypted. We do not sell data and we use no advertising trackers.

1. Who is responsible

Rivemont runs this website and the app and is responsible for the data described here. Questions and requests: contact@rivemont.xyz, or @rivemont_bot on Telegram.

2. What we keep

  • Your wallet address, when you sign in with a wallet, and a hash of your Rivemont sign-in key (never the key itself). That key only signs you in to Rivemont: it is not your wallet's private key or seed phrase, and it cannot send your funds to anyone else.
  • Exchange connection. The Hyperliquid API wallet Rivemont uses for you, and any key kept from an exchange no longer offered, stored encrypted. They are used to place and cancel your orders, for earlier Earn users to move money between their Hyperliquid account and a vault they chose, and to send a withdrawal only when you sign for it in your wallet, to your own wallet only. A Hyperliquid API wallet cannot withdraw by itself. What the key can do.
  • Your settings and activity. Your bots, alerts and preferences (and any copy set up earlier), and a record of the orders sent through Rivemont, so the app can show your history and fees.
  • Points and referrals. Your points, tier and referral code, if you take part.
  • Telegram. Your Telegram user ID and chat ID, only if you link Telegram for alerts or message @rivemont_bot. If you add @rivemont_bot to a signal channel or forward posts to it: the channel's ID, name and username, who added the bot, and the text of the posts it reads.
  • News list. The email address or Telegram name you leave on the Join page, and the referral code you came with, only if you ask us to write to you when something new opens.
  • Server logs. Technical logs of requests and errors, used to keep the service running and to stop abuse. Our servers do not write your IP address to their logs or databases: it is held only in memory to limit request rates, and Cloudflare sees it (section 5).

We use this data only to run the app you asked for (your account, exchange connections, orders, fees and history), to keep the service secure and stop abuse, and, where you chose it, to send you alerts or news. Alerts and the news list are optional: turn them off or ask to leave the list at any time.

3. What we do not collect

No KYC: we never ask for your name, an identity document, an email address or a phone number to use the app. We do not sell or rent data, we show no advertising and we do not track you across other websites. Visitor numbers come from Cloudflare as totals, not as profiles of people.

Besides those totals, the site counts a few steps of the bot setup (opened the demo, finished a setup, saw its backtest, tried to connect a wallet, started a bot) under a random ID kept in your browser (local storage and the cookie rv_vid), to see where the site is hard to use. It is never linked to your wallet address, IP address or name. Browsers that send Do Not Track or Global Privacy Control are not counted, and clearing this site's data resets the ID.

4. Cookies and browser storage

The site uses a few of its own cookies and your browser's local storage for things it needs: your language and theme, your sign-in on this device, favourites and layout choices. There are no advertising or third-party tracking cookies. Clearing this site's data in your browser removes them.

5. Who else sees data

  • Hyperliquid. Your orders go to Hyperliquid with your account address. Hyperliquid handles that data under its own privacy policy. Trades on a public blockchain are public and permanent.
  • Cloudflare delivers the website and protects it from attacks. It processes connection data such as IP addresses to do so, on a network that runs worldwide.
  • Our hosting provider runs the servers where the data above is stored, in Japan. If you live elsewhere, your data is stored and handled outside your country.
  • GitHub keeps a private daily copy of our databases for 30 days as our backup. Exchange keys in it stay sealed with a key that is not in the backup.
  • Blockchain nodes and swap services. Public network nodes receive your wallet address and the transaction when you deposit or withdraw. Swap and bridge services (for example LI.FI, Velora, Relay and Skip) receive them when you use Convert or move funds to an exchange no longer offered, which stay open only to earlier users.
  • WalletConnect relays the messages between this site and your wallet app when you connect a wallet through it.
  • Telegram delivers your alerts and the bot's messages, if you use them.

We share nothing else with anyone, unless the law requires it.

6. How long we keep it

Your data stays while you use the app and until you ask us to delete it. Stop everything deletes your exchange keys from our servers at once; the sealed copies in our backups expire within 30 days. Server logs hold no IP addresses and are kept only as long as needed to run and protect the service. A record of orders and fees can be kept longer where it is needed to settle fees or to prevent abuse. News-list contacts stay until you ask to leave the list.

7. Your choices and how to delete your data

  • You can ask what we hold about you, have it corrected or deleted, or get a copy of it.
  • Stop everything in Settings stops every bot (and any copy you still run), closes the positions they opened and deletes your exchange keys from our servers.
  • To delete everything else, write to contact@rivemont.xyz or to @rivemont_bot with your wallet address. We answer within 30 days.
  • We cannot delete what is recorded on a public blockchain or kept by an exchange: ask the exchange for its own records.
  • If you think we handled your data wrongly, tell us first. You can also complain to the data protection authority where you live.

8. Security

Keys are encrypted at rest and used only by the service that places your orders. Access to the servers is restricted. No system is perfectly secure: if a breach ever affects your data, we will say so in the app and on this site.

9. Changes

Rivemont is for adults (18 and over). We may update this policy; the date above changes when we do, and material changes are announced in the app. The terms of use cover everything else.