MetenaSecurity at Metena
Metena reads your accounts to analyse your strategy. It cannot place orders or withdraw funds. This page describes what protects your access and your data, and what does not depend on us.
Four commitments you can check
- Read-only
- Metena only asks for read-only API keys. You can see this on your exchange, in the key’s list of permissions.
- Keys with wider permissions rejected
- If the key you paste allows trading or withdrawals, Metena rejects it when you save it, on the exchanges that allow this check.
- No private key
- Your wallets are tracked through their public address. Metena never asks for a recovery phrase or a private key.
- Immediate deletion
- When you disconnect an exchange, its key is erased from our servers straight away.
What Metena can do with your accounts, and what it cannot
Metena can
- Read your balances and positions
- Read your transaction history
- Calculate your allocation, your performance and your deviations from your strategy
Metena cannot
- Buy or sell on your behalf
- Withdraw or transfer funds
- Change your account settings
- Know your exchange password
Connecting an exchange is optional.
Creating a read-only API key
An API key is created in your exchange’s settings, in the API section. Enable the read permission only and leave trading and withdrawals disabled.
| Exchange | Permission to enable | Good to know |
|---|---|---|
| Binance | Enable Reading | Enabled by default. Leave the other boxes unchecked. |
| Coinbase | View | No Trade or Transfer permission. |
| Kraken | The Query permissions (viewing) | No permission from the Orders and Withdraw sections. |
| OKX | Read | A passphrase is set when the key is created. Metena needs it. |
| Bybit | Read-Only | Choose a read-only key when you create it. |
| KuCoin | General | Passphrase required, as on OKX. |
| Crypto.com | Read only | Metena cannot check this key’s permissions. Check them before you paste it. |
Labels vary from one exchange to another and change over time. If in doubt, enable reading only.
Encryption and access
- API keys encrypted with AES-256-GCM before any storage.
- The encryption key is kept on the application server, separately from the database, and is not shared with any third party.
- Communications between the app and the server over HTTPS (TLS 1.3).
- Sign-in to your account by signed token (Supabase Auth).
- Server administration by SSH key only, with no password.
- No plaintext passwords in logs.
If the worst happened
No system is immune to intrusion. Here is what an attacker would obtain, and what you could do.
- If the database leaked
- The API keys in it are encrypted. The key that decrypts them is not in the database.
- If a key were decrypted anyway
- It is read-only: it gives access to your balances and your history, and allows neither orders nor withdrawals.
- What you can do at any time
- Delete the key from your exchange. It stops working immediately, without going through Metena.
- What we would do
- Inform you and notify the CNIL (France’s data protection authority) within 72 hours, as the GDPR requires in the event of a personal data breach.
Subprocessors and data location
Every service has an identified host.
| Service | Host | Location |
|---|---|---|
| Backend API | Hostinger VPS | Manchester, United Kingdom |
| Authentication + PostgreSQL database | Supabase | European Union |
| metena.app website | Vercel | United States |
| LLM (request processing) | Anthropic; overflow: OpenAI, Google, Mistral AI | United States; France as a last resort |
| Voice dictation transcription | Whisper, on Metena’s server (Hostinger) | Manchester, United Kingdom |
| Usage measurement (with your consent) | PostHog | United States |
| Crash reports | Sentry | European Union |
| Notifications | Expo; Apple or Google | United States |
| Emails | Resend | United States |
Your account, your strategies and your keys are hosted in the United Kingdom and the European Union. Your questions to the Owl and the context of your strategy are sent to Anthropic (Claude), in the United States, which means outside Europe. When Anthropic is saturated or unavailable, the request may be handled by OpenAI or Google Gemini (United States), and as a last resort by Mistral AI (France). Your API keys are not part of this context.
Metena does not sell or rent your data.
Retention and deletion
| Data | Retention |
|---|---|
| Account, strategies, journal and portfolio | Until account deletion, then immediate erasure from our databases |
| Strategies published on the marketplace | Removed when the account is deleted |
| Exchange API keys | Deleted immediately upon disconnection |
| Session opened without creating an account | 7 days, then the draft is deleted |
| Exchanges with the AI (requests and answers) | 30 days |
| Notifications sent and alerts triggered | 90 days |
| Analysis history of your decisions (discipline score, deviations) | 15 months |
| Server logs | Rolling 7 days |
| Usage events (usage measurement) | 24 months |
| Waitlist email address | Until the email announcing the app’s release, or earlier on request |
| Encrypted backups of our databases | 14 days for our backups |
| Technical data in the database | 180 days; operations data: 120 to 760 days depending on the table |
| Diagnostics | Detailed content reduced over time; records kept until account deletion |
| Withdrawal requests | 3 years |
| Technical record of an account deletion (technical identifier only) | 30 days |
What Metena does not collect
- Biometric data
- Precise geographic location
- Contacts, photos, or files from your device
- Browsing history outside the application
- Payment data (bank card): payment is handled by Apple or Google
You can delete your account from the app’s settings. To obtain a copy of your data or exercise your other rights, write to privacy@metena.app. The details are in the privacy policy.
Reporting a vulnerability
Think you have found a vulnerability? Write to privacy@metena.app and describe the steps to reproduce it. We ask you not to make it public before it is fixed and not to access other users' data.
The limits
- On Crypto.com, a key’s permissions cannot be checked automatically. Checking them is up to you.
- A read-only key is still sensitive: it reveals your balances and your history.
- The security of your account also depends on the security of your phone and your email.
- Metena has not undergone a third-party security audit.
- Metena is a decision-support tool and does not provide investment advice. The AI can be wrong.
An analysis that does not touch your funds.
Read-only, no commission on your transactions, cancel anytime.
Notify me at launch