Trust & Security

Built so you never have to hand over your crypto

Connecting a tool to an exchange account is a real decision. This page explains exactly what LunaVector can do, what it technically cannot do, and where our responsibility ends and yours begins.

Your assets never leave your exchange

LunaVector is non-custodial. We do not hold, pool, or move customer funds — there is no LunaVector wallet your crypto passes through. Everything stays in the account you already control at Binance, Coinbase, Kraken or Bitvavo.

Trade-only API keys, no withdrawal rights

The API key you create grants two permissions: read your balances and place orders. We never ask for withdrawal permission, and the platform has no withdrawal function to call even if a key were mis-configured. You can revoke the key on your exchange at any moment.

Nothing moves without your approval

Every month you receive a rebalance proposal: a concrete list of orders. You can approve, edit, postpone or reject it. Approval covers that one set of transactions only — there is no standing mandate and no automation running in the background.

A full audit trail you can export

Every proposal, every change you make to it, and every approved order is recorded with a timestamp. You can review the history in the platform and export it for your own records or your accountant.

What LunaVector can and cannot do

The clearest way to describe a permission model is side by side.

What we can do
Read your balances and positions
Calculate how far you have drifted from your index
Prepare a monthly rebalance proposal
Transmit the exact orders you approved
Keep a timestamped record of it all
What we cannot do
Withdraw or transfer your crypto
Move funds between your accounts
Place a trade you have not approved
Change your index selection for you
Access your exchange login or password

Data and privacy

We process the minimum needed to run the service: your account details, your exchange API credentials, your holdings, and the proposals and approvals tied to them. API credentials are stored encrypted and are only used to read balances and transmit trades you approved.

We do not sell personal data. Under the GDPR you can request access, correction, export or deletion of your data at any time.

Read the privacy policy →

Who we are

LunaVector B.V., Mt. Lincolnweg 40, 1033 SN Amsterdam, The Netherlands. A registered Dutch company with a named team behind it — not an anonymous project.

Security question, suspected vulnerability or an incident to report? Write to us and we will come back to you.

support@lunavector.com

Where we are honest about the limits

Trust works both ways, so here is the part most sites leave out.

We are not a licensed crypto service provider.

LunaVector does not hold a CASP licence. We do not custody assets, execute trades on our own initiative, or run an exchange. Orders are placed on your own exchange account, by you, after you approve them.

We are not an investment adviser.

The indexes we support are generic and rules-based — identical for every customer who selects them. Nothing on this site is personalised advice or a recommendation to buy, sell or hold any asset.

Crypto investing can lose you money.

Digital assets are highly volatile. Following an index does not protect against losses, and past index performance says nothing about future results. Only invest what you can afford to lose.

Rebalancing has costs and tax consequences.

Approved trades incur your exchange's own trading fees and can be taxable events in your jurisdiction. LunaVector charges no commission, but it also cannot make those costs disappear.

This page is maintained by LunaVector B.V. to answer common security and privacy questions about the platform. It describes our own practices and is not an independent certification or audit.

Trust questions, answered

The full list lives on How It Works.

What exchanges do you support?

We support major centralized exchanges: Binance, Coinbase, Kraken and Bitvavo. We connect through trade-only API keys, so your funds never leave your own exchange account.

How does LunaVector handle custody and access?+
What could LunaVector do with my API key?+
Does anything happen automatically?+
Is LunaVector a licensed crypto service provider?+
What happens if LunaVector stops operating?+
What happens if I want to withdraw my funds?+

Still have a question before you connect anything?

Ask us anything about custody, keys or the approval flow. A real person answers.

Talk to us