TL;DR — Your assets stay on your exchange. LunaVector only holds API keys scoped to read balances and place spot trades — never to withdraw.

What "non-custodial" means here

• LunaVector never takes custody of your crypto.
• We do not hold wallets, private keys, or seed phrases.
• We only interact with your exchange through an API key you generate.

What LunaVector can do with your key

• Read your balances and trade history.
• Place spot buy/sell orders for rebalancing.

What LunaVector cannot do

• Withdraw funds to another wallet.
• Transfer between your exchange sub-accounts without permission.
• Trade margin, futures, or derivatives.
• Change your exchange account settings.

Your controls

• Revoke the API key at any time on the exchange — LunaVector access stops immediately.
• Remove an exchange from LunaVector with one click in Settings → Exchanges.
• Export your data at any time.

Platform security

• Secrets encrypted at rest.
• Strict session management and JWT handling.