How Your Funds Stay Safe

Understanding Rainbow's security architecture and how we protect your investments without ever having access to your funds.

Our Core Security Promise

Rainbow NEVER holds, controls, or has access to your funds.

Your money always stays in your exchange account. We can only trade with it, never withdraw or transfer it. This fundamental architecture ensures your funds remain under your complete control.

How Rainbow Accesses Your Account

1

You Create API Keys

You generate API keys on your exchange with trading permissions only. These keys allow Rainbow to place buy/sell orders but cannot withdraw funds.

2

IP Whitelisting Required

You must whitelist Rainbow's IP address (107.189.19.87) so your API keys only work from our secure servers, preventing unauthorized access.

3

Secure Trading Operations

Rainbow uses your API keys to execute trades based on your chosen strategy. All operations are logged and monitored for your security.

4

You Retain Full Control

You can revoke API keys, pause bots, or withdraw funds directly from your exchange at any time. Rainbow cannot prevent or interfere with these actions.

Multi-Layer Security Architecture

API-Only Access

Rainbow never holds or controls your funds

Security Features:

  • Trading permissions only - never withdrawal
  • Your funds always stay on your exchange
  • Cannot transfer money out of your account
  • API keys can be revoked instantly by you

Your Benefit:

Complete control over your funds at all times

IP Whitelisting

Your API keys only work from Rainbow's servers

Security Features:

  • Mandatory IP restriction: 107.189.19.87
  • Prevents unauthorized access from other locations
  • Exchange-level security enforcement
  • Immediate blocking of suspicious requests

Your Benefit:

Protection against API key theft and misuse

Encrypted Communication

All data transmission is secured end-to-end

Security Features:

  • TLS 1.3 encryption for all API calls
  • Secure credential storage with encryption
  • No plain text transmission of sensitive data
  • Regular security audits and updates

Your Benefit:

Your trading data and credentials stay private

Real-time Monitoring

Continuous oversight of all trading activities

Security Features:

  • 24/7 monitoring of bot activities
  • Automatic detection of unusual patterns
  • Instant alerts for security events
  • Detailed audit logs of all actions

Your Benefit:

Immediate detection and response to any issues

Infrastructure Security

Enterprise-grade security for our systems

Security Features:

  • Cloud infrastructure with bank-level security
  • Regular penetration testing
  • Isolated environments for each user
  • Automated backup and disaster recovery

Your Benefit:

Reliable, secure platform you can trust

What Rainbow Cannot Do

Financial Restrictions:

  • Withdraw funds from your exchange
  • Transfer money to other accounts
  • Change your exchange account settings
  • Access your exchange login credentials
  • Modify your API key permissions

Access Restrictions:

  • View your personal information
  • Access other exchange features
  • Control your exchange security settings
  • Prevent you from stopping the bot
  • Override your manual trading decisions

Risk Management & Mitigation

Exchange Hack or Downtime

How we mitigate this:

Your funds are on the exchange, not with Rainbow. If an exchange has issues, your funds are subject to the exchange's security and insurance policies, not ours.

Our recommendation:

Choose reputable exchanges with strong security track records and insurance coverage.

API Key Compromise

How we mitigate this:

Even if API keys were compromised, they cannot be used to withdraw funds. IP whitelisting prevents use from unauthorized locations.

Our recommendation:

Store API keys securely and rotate them regularly. Monitor your exchange for unusual activity.

Trading Losses

How we mitigate this:

Rainbow implements risk management features, but all trading involves risk. Start small and understand the strategies.

Our recommendation:

Begin with minimum investment, understand the bot strategies, and never invest more than you can afford to lose.

Rainbow Service Disruption

How we mitigate this:

Your funds remain on your exchange. You can disable API keys or manually trade if needed.

Our recommendation:

Keep your exchange login credentials secure and understand how to manage your account manually.

Emergency Procedures

If you need to stop trading immediately:

  1. Log into your Rainbow dashboard and pause/stop all bots
  2. Or disable API keys directly on your exchange
  3. Your funds remain safe on the exchange

If you suspect security issues:

  1. Immediately disable API keys on your exchange
  2. Change your exchange account password
  3. Contact Rainbow support for assistance
  4. Review your exchange activity logs

Compliance & Transparency

Regular Audits:

  • • Security infrastructure reviews
  • • Code audits by third parties
  • • Penetration testing
  • • Compliance assessments

Transparency:

  • • Detailed activity logs
  • • Real-time trading reports
  • • Open source components where possible
  • • Regular security updates

Learn More About Security

API Key Security Best Practices

Learn how to keep your credentials safe

Understanding API Permissions

What permissions we need and why

Ready to start trading securely with Rainbow?

Connect Your ExchangeSet Up Your First Bot