Your Bitcoin stays in your exchange account

dca.bot buys on the account you already have at the exchange. You don't send us anything. The coins stay where you can see them, in your exchange app.

The key can only trade

Create the API key so it can trade and cannot withdraw. Leave withdrawal and transfer off. Without that permission, the bot cannot send coins off the exchange.

We store the key, encrypted

The bot runs without a server of your own, so the key is stored with us. It is encrypted at rest with AES-256, and the connection uses TLS.

Buys only from our IP

When you connect an exchange, setup shows you an IP. Add it to the whitelist at the exchange. Buys are sent only from that address. A key limited to that IP does not work from anywhere else.

You can stop any time

Disconnect the exchange in dca.bot, or delete the key at the exchange. After that, no further buy can go out.