KYC — when and why
Phase 0 does NOT require KYC. Phase 2 will when Botely opens to public users with payment processing. What we'd ask for, and why.
Today (Phase 0)
No KYC. Sign up with email, log in via magic link. We collect: your email, your dYdX wallet address (you provide it during the trading-key wizard), your Stripe customer ID (when you subscribe). No ID documents, no proof-of-address, nothing else.
This works because we don't custody funds and we don't process traditional fiat payouts.
When KYC will be required
Phase 2 trigger: opening Botely to the general public WITH paid subscriptions handled at scale, possibly with revenue sharing or affiliate programs that move money beyond simple Stripe subscriptions.
If we ever introduce a custodial product (e.g., 'deposit USDC with Botely, we manage it'), KYC becomes mandatory under EU AML directives + MiCA — but that's not on the roadmap.
What we'd ask for
Standard EU AML 'simplified due diligence' for paid users: full name, date of birth, residential address, country.
For higher-value tiers or revenue-share affiliates: government-issued ID document (passport or national ID), selfie verification, proof-of-address (utility bill or bank statement < 3 months old).
All KYC would be handled by a regulated KYC provider (Sumsub, Onfido, or similar), not stored directly by Botely beyond a pass/fail status.
Your data rights
GDPR applies. You can request deletion of your account at any time. KYC documents would be retained per the regulated provider's legal obligation (typically 5-10 years), separate from your Botely account proper.
Right of access, right of rectification, right of erasure (where compatible with AML retention): all standard EU rights apply.