Where is your money while the bot trades?

In your own account, in your name. The bot receives a trade-only API key with no withdrawal rights. It only sends orders. You see every trade and can withdraw any amount at any second.