CoinSpider- Home
- Security and transparency
Security and transparency
Before you hand trading to any software, you should know exactly what it can and cannot do. This page sets out our rules. Every one of them is written into the code.
Your funds stay in your hands
CoinSpider does not hold your funds and has no ability to move assets out of your account. We place orders through a Binance API key whose permissions you set on Binance and can revoke at any time.
We check your API key item by item
When you enter an API key in the app, the system asks Binance what that key is actually allowed to do. If any required item fails, the key cannot be connected for live trading.
| Check | Requirement | Why |
|---|---|---|
| Reading | Required | To see balances and holdings |
| Spot trading | Required | To place spot orders |
| Withdrawals | Must be off | Keys with withdrawals enabled are rejected |
| IP whitelist | Must be bound | The key only works from whitelisted IPs; add only the server IP shown in the app |
| Universal transfer | Recommended off | Not needed |
| Futures | Recommended off | We only trade spot |
How keys are stored
API keys and secrets are encrypted on our servers with integrity checks, so tampering is detected. Because withdrawals are off, even someone holding the key could not move assets out, and as long as the IP whitelist contains only CoinSpider's server IP, the key cannot be used from anywhere else.
What the engine can and cannot do
Can
- Buy and sell Binance USDT spot within the total budget you set
- Follow the risk level and exit plan you chose
- Log every action and the reason for it
Cannot
- Withdraw or move any asset out of your account
- Trade coins you held before connecting (except stablecoins and dust under 1 USDT)
- Trade futures or use leverage
- Exceed the total budget you set
Paper first; you decide when real money is used
New accounts start in paper mode. Going live requires typing a confirmation phrase, and you can switch off auto-entries or close everything from Settings at any time.
How the public track record is calculated
It counts only live positions opened by AI signals; manual trades are excluded. Positions from the same signal across accounts are merged into one return. Every win and every loss counts toward the statistics, nothing cherry-picked (the list shows the latest 30), and only percentages are published — never anyone's amounts or accounts.
See the public track recordIndependent review
The potential board and review verdicts come only from market data and AI review. The system has no way to pin a coin or to pay for a place on the board.
Your data
We never sell or rent your data and send no marketing email. You can unlink third-party sign-ins or request account deletion in the app, and we process deletions within 7 days.
Risk still exists
These measures protect your account permissions, not your returns. Crypto is volatile, small caps especially, and AI can be wrong. Only invest what you can afford to lose.
Contact
For partnerships, use the partnership form. Account requests such as deleting your account can be submitted in the app under Settings → Sign-in methods.