Account Mode / Funds and Permissions

Where your money is held and what the platform can do— these things should be made clear before you get started.

The key difference between account modes lies not in the appearance of the pages, but in the location of funds, operational permissions, and day-to-day management responsibilities. Customers should understand each of these boundaries before opening an account.

The individual API mode provides greater account control, while the integrated account mode reduces configuration and management efforts. Both methods must be operated with clearly defined permissions and accurate records.
Personal APIKeep your funds on your own exchange
Integrated AccountThe platform handles all operational management centrally.
Define BoundariesDo not run the program if permissions are unclear.
Why it matters

The Three Most Frequently Asked Questions

Funds and permissions must be explained separately: the location of funds answers “Where is the money?”, the scope of permissions answers “What can the system do?”, and management responsibility answers “Who handles anomalies?”. Only when these three aspects are clearly understood can customers know what the account mode they’ve chosen truly entails.

Where is my money?

Depending on the account mode, funds remain with the customer’s exchange or are transferred to the platform’s integrated account.

The principal for personal APIs is held at the customer’s exchange; funds from integrated accounts enter the platform’s management process and are recorded in the customer’s segregated ledger. The location of the funds must be determined first before we can discuss who is responsible for management and fees.

What can the platform do?

Execute trades only within the selected account mode, valid authorization, and risk limits.

Personal Mode uses limited read and trading permissions; Integration Mode handles account onboarding and operation through the platform. The system can only operate within the mode selected by the customer and within valid risk limits.

What can’t the platform do?

Do not bypass permissions, speculate on the ownership of funds, or interpret an unknown status as a success.

The platform must not bypass customer authorization or request unnecessary confidential information, nor may it make assumptions about outcomes when funds, orders, or ownership are unclear. If confirmation cannot be obtained, the system must display a "Pending" or "Exception" message.

Complete guide

Use a single, comprehensive boundary to illustrate where funds are located and what the system can do.

What customers truly need is not just a promise that “funds are secure,” but the ability to verify, item by item, the location of their funds, the scope of permissions, management responsibilities, and procedures for handling anomalies. The differences between the two account modes should be compared within the same set of questions.

01 / Personal

Control Boundaries for Individual API Mode

Customers retain control over their exchange accounts and funds; the platform uses an API—which does not include withdrawal permissions—to read account data and execute trades.

In Individual API Mode, funds remain in the customer’s own exchange account. The platform uses a limited API to read account information and execute trades; the customer retains control over logging in, managing funds, and disconnecting the API. The platform does not require and should not request withdrawal permissions.

  • Funds remain on the customer’s exchange
  • Customers retain the right to revoke API access
  • The platform does not require withdrawal permissions.
02 / Integrated

Management Boundaries for Integrated Accounts

The platform handles account onboarding and operational management, and uses independent customer records to track principal, returns, fees, and status.

While the platform handles the fund flow and trading account management for integrated accounts, each customer must still maintain clear ownership of their funds and independent records. The available balance, used balance, earnings, and fees displayed to customers cannot be simply calculated based on the platform’s total balance.

  • Customers do not need to configure exchange APIs
  • The ownership of client funds must be clearly defined.
  • Normal fund flows are recorded by the system
03 / Credentials

Passwords and keys have clearly defined usage boundaries

Customers should not send login passwords, email verification codes, or exchange keys to customer service or any individual; sensitive configurations should only be completed through official channels.

Login passwords, email verification codes, and API keys are not to be shared with customer service representatives. Customers should only complete sensitive configurations through the official secure portal at oqiron.com; any request for this information via chat is not part of the standard account activation process.

  • Do not share your verification code with others.
  • API keys should only be entered on the official platform.
  • If you notice any anomalies, cancel the transaction immediately and contact customer support.
04 / Records

The status displayed to customers is based on actual records.

Accounts, funds, orders, and fees must not be replaced with demo data. When verification is not possible, an error or "pending" status should be displayed rather than showing false, normal results.

The funds, orders, and fees displayed on the account page must be derived from actual business records. If this cannot be confirmed at the moment, the correct approach is to display the status as “Pending,” “Restricted,” or “Abnormal” and continue verification, rather than using demo data or outdated statuses to make the page appear normal.

  • Prioritize real data
  • Clear indication of unknown status
  • Historical transactions are retained.
05 / Personal boundary

Personal API: Customers control their exchange accounts, and the system is granted limited trading capabilities

The trading principal, exchange login credentials, and API revocation rights belong to the customer. OQIRON reads balances, positions, orders, and trades via the API and executes strategy trades within the scope of authorization; the platform does not require customers to transfer principal and should not be granted withdrawal permissions.

After a customer revokes an API, the system can no longer verify account information and will therefore restrict operations; however, revoking the connection does not mean that existing positions on the exchange will automatically disappear. Customers must verify their actual positions and orders on the exchange and follow security procedures accordingly.

  • Customer-Held Funds and Login Controls
  • The system uses only the necessary read and transaction permissions.
  • Revoking an API does not automatically clear live positions.
06 / Integrated boundary

Integrated Accounts: The platform manages the fund flow, but client ownership must be clearly defined.

Clients do not configure exchange APIs themselves; the platform is responsible for account integration, operation and maintenance, and fund flows. In exchange, the platform must use client-isolated ledgers to account for principal, utilized funds, returns, fees, and withdrawal status; it cannot simply provide clients with a balance whose source cannot be verified.

Normal deposits are confirmed by the system based on actual fund transactions. Administrators primarily handle exceptions, freezes, retries, and reviews; manual approvals should not be used as a substitute for on-chain deposits, exchange deposits, or customer account allocations.

  • The platform assumes greater responsibility for integration and maintenance
  • Client funds must be recorded separately.
  • Manual operations cannot replace actual fund receipts and reconciliation.
07 / Security line

Regardless of which mode you choose, passwords, verification codes, and secret credentials are not considered customer support information.

Official customer service representatives may verify customer IDs, public order numbers, page errors, and screenshots that do not contain confidential information, but they will never ask customers to send exchange passwords, API secrets, passphrases, private keys, mnemonic phrases, or email verification codes.

When funds, orders, or fees cannot be verified, the page should display "Pending," "Restricted," or "Exception." What is most valuable to customers is not that the page always displays a green status, but that the system clearly stops making assumptions when evidence is insufficient and preserves a path for subsequent verification.

  • Confidential information is to be used only through the official secure portal.
  • Error reports should only include verifiable, non-sensitive information.
  • Unknown statuses must be clearly displayed rather than disguised as normal.

Determine whether the funds and permissions are clear

01

Confirmation Mode

Know which funding method is used

First, confirm whether the customer has chosen an individual API or an integrated account, as this step determines the location of funds, the integration method, maintenance responsibilities, and the fee structure.

02

Confirm Permissions

Find out which capabilities are available

Withdrawal permission does not block API binding or robot Start, and OQIRON never uses a customer trading API to withdraw.

03

Verification Complete

Connection and funding status are live and available

Connections, on-chain deposits, customer ledgers, and exchange statuses must be verified against actual facts. A successful page save or administrator action cannot substitute for formal confirmation.

04

Get Started

Execute after risk conditions are met

The system will only enter operation once all conditions regarding funds, permissions, risk, and account status are met; any change in these parameters will trigger a new check rather than relying on the previous normal state.

Explanation

Funds, Permissions, and Liability Boundaries for Personal APIs and Integrated Accounts

01Can I withdraw funds from the platform in individual API mode?+

Withdrawal permissions are neither required nor permitted.

02Why does an integrated account require a platform-managed fund flow?+

Although customers choose to have the platform handle account onboarding and operational management, customer attribution and records must still be clearly defined.

03Can I send my API key to customer support?+

No. Sensitive information should only be configured through the secure portal on the official client platform.

04What should I do if the status cannot be confirmed?+

The system should display "Processing" or "Exception" and continue verifying; it must not speculate on the result.

Next stepKeep learning before deciding whether to begin.