Privacy Policy

What data we collect

When a member verifies through Gatekit, we collect and store the following:

• Your Discord user ID and username, or your Telegram user ID and username, depending on which platform your community uses
• LBank Open ID (your unique LBank identifier)
• Trading volume for the current cycle — fetched from the LBank affiliate API
• Spot USDT balance on your LBank account — read during verification to check your community's deposit requirement, and recorded in our verification log
• VIP cycle start date and activity status

For community operators, we also collect the setup information provided during onboarding (community name, the Discord server and role IDs or the Telegram group ID, and — in advanced mode only — LBank API credentials).

How we use your data

All data is used solely to operate the Gatekit service:

• Verifying that members meet the trading volume and deposit requirements set by their community operator
• Automatically granting or removing VIP access — assigning and removing a VIP role in Discord, or adding and removing members from the private group in Telegram
• Sending reminder notifications when a member is at risk of losing VIP access
• Displaying member statistics in the community dashboard

What we don't do

• We never sell or share your data with third parties
• We never access your LBank funds or execute trades on your behalf
• We never use your LBank keys for anything but reading your affiliate data. Advanced-mode keys are stored encrypted at rest. We ask for read-only keys, which cannot trade or withdraw
• We never use your data for advertising or marketing purposes

Data storage

All data is stored in a single managed PostgreSQL database hosted on Railway (US West region). Each community's records are logically separated, and the dashboard only ever serves a community its own data. Volume data is refreshed on a regular cycle.

Data retention

Member data is retained for as long as the community uses Gatekit. Removed members remain in the database in an inactive state for record-keeping. Community operators can request full data deletion by contacting us.

Your rights

You have the right to request access to, correction of, or deletion of your personal data at any time. To make a request, contact us at the address below.

Contact