It is always better that you have to keep the token in an autonomous purse as trazor if you don't trade long time since then. You can give the tokens at any time at the exchange when you want to trade in these tokens, but there you have to be sure of safety of this exchange. If exchange has two-factor authentication and authentication of Google, then your tokens can be safe.