🔐 Security & Privacy
At Block Box, we understand that trust is the foundation of any tool used in trading — especially when it involves AI, automation, and blockchain integration. That’s why security and privacy are not afterthoughts — they are core pillars of our product design.
🧠 Data Privacy by Design
Block Box is built with a "privacy-first" architecture. Here's how user data is handled:
No Chart Storage Uploaded chart images are processed in-memory and discarded immediately after analysis. We do not store or reuse chart data.
No Account Linking Required Users can interact with the bot anonymously via Telegram without needing to connect email, wallet, or exchange accounts.
No Personal Information Collected We do not collect names, locations, or trading history. Your strategies stay yours.
🔒 Infrastructure & Security Practices
Isolated Bot Environment All bot interactions are processed in a secure, containerized environment, isolated from other services.
API & Model Access Protection The core AI engine is protected by internal firewalls and rate-limiting to prevent abuse and tampering.
Encryption in Transit All communication between the bot and backend servers is encrypted using HTTPS and secure WebSockets.
Minimal Attack Surface No web-based login portal, no public-facing API for user access — reducing potential entry points for malicious activity.
🧱 Token Safety
$BLOCK Smart Contract Security The $BLOCK token contract is developed using audited open-source libraries and will be independently verified before public deployment.
Liquidity Lock All initial liquidity will be locked through trusted protocols (e.g. Unicrypt, Team Finance), and details will be made public.
No Team Allocation Since there is no direct allocation to the team, there is no risk of team-triggered dump events.
🧭 Future Safeguards
Optional integration with on-chain identity (for DAO voting) will be opt-in and privacy-preserving.
Premium access and wallets will use token-gating, not KYC.
Bot behavior will remain transparent and auditable through community oversight.
✅ Summary
Chart & image storage
No storage; processed in-memory and discarded
User identity
Fully anonymous; Telegram-only usage
Smart contract safety
Audited code, locked liquidity, no minting
Data security
Encrypted transmission; containerized backend
Governance risks
Community-driven roadmap with transparent voting (Phase 4)
Last updated