This page says what Rex stores and uses. Rex is built to keep little, and the list below is meant to be complete.
What Rex keeps
- Your Telegram user id and the name Telegram gives the bot, to know who you are.
- The addresses of your wallets and the access Rex needs to sign for them.
- Your trades, orders, withdrawals, bridges and their results, so you can see your history and your open orders.
- Your settings: slippage, limits, saved addresses, watchlist, alerts, snipe and copy setups, your PIN as a salted hash, and any trusted contact you add.
- Your invite link, who invited you, and the referral numbers that follow from it.
- A daily value of your portfolio, when Rex can read all of it, for the portfolio curve.
The web terminal
When you log in on the web, Rex keeps a hash of the login secret, the kind of browser and system, and the first part of the address (the first two numbers of an IPv4 address, for example), so you can spot a login from somewhere you do not recognise. You can see and end your sessions in Settings. Rex does not keep the full address for this.
Visits
To count visitors, Rex stores one hash per visitor per day, made from the day, the address and the browser. The address itself is not stored, and the hash is not tied to your account.
What Rex does not do
- It does not sell your data or share it for advertising.
- It does not ask for your seed phrase. Your keys stay behind Rex's signing service until you export them.
- It does not use advertising cookies. The web terminal sets one login cookie that the page's scripts cannot read, so you stay logged in, and it keeps a few display choices, like a collapsed menu, in your browser.
Outside services
To work, Rex sends requests to other services: chains and their data providers, price and market providers, venues and bridges, Telegram, and the wallet service that signs your transactions. A request to these can include a wallet address or a token, because the service needs it to answer. Each of them has its own privacy rules. Public blockchains are open to everyone, so a trade you make is visible there for good.
Linking X
If you link an X account, Rex checks that the account exists, keeps the handle with your id, and reads its public bio once to find your code. Remove the code from your bio when it says you are linked.
Alerts and your trusted contact
If you add a trusted contact, Rex sends them a copy of your security alerts, such as a withdrawal or a limit change. They see the alert text and your first name, and they do not get access to your account. You can remove them, and removing them waits one hour.
Keeping and deleting
Trade records stay as long as your account does, because they are your history. Ask through /support if you want your account data removed. Records that Rex must keep for its own safety, or that are already on a public chain, cannot be erased.
Backups
Rex keeps copies of its database for recovery. A removed record can remain in a backup until that copy is replaced.
Changes
If what Rex keeps changes, this page changes with it.