Privacy Policy

1. Introduction

At Cryptosystems.ai, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, store, and protect your data when you use our cryptocurrency signal and news platform.

Development Status: Our platform is currently in active development. We are implementing best practices for data protection and will continue to enhance our privacy measures as we grow.

2. Information We Collect

2.1 Information You Provide

• Account Information: Email address when you register
• Authentication Data: Encrypted password or OAuth tokens (Google authentication)
• Profile Information: Any additional information you choose to provide

2.2 Automatically Collected Information

• Usage Data: Pages visited, features used, time spent on platform
• Device Information: Browser type, operating system, IP address
• Session Data: Login times, access tokens (securely stored)
• Technical Data: Error logs, performance metrics

3. How We Use Your Information

We use your information for the following purposes:

3.1 Service Delivery

• Creating and managing your account
• Authenticating your identity
• Providing access to platform features
• Delivering cryptocurrency signals and news

3.2 Transactional Communications

• Email Verification: Confirming your email address during registration
• Password Reset: Sending secure password reset links
• Security Alerts: Notifying you of suspicious account activity
• Service Updates: Important announcements about platform changes

Note: We send only transactional emails. We do NOT send marketing emails, newsletters, or promotional content. You will only receive emails that are essential for account security and service functionality.

3.3 Platform Improvement

• Analyzing usage patterns to improve features
• Debugging technical issues
• Enhancing security measures
• Optimizing performance

4. How We Store and Protect Your Information

4.1 Security Measures

• Encryption: Passwords are hashed using bcrypt with salt
• Secure Storage: Data stored in secure PostgreSQL database
• Token Security: JWT tokens with expiration, refresh tokens in httpOnly cookies
• HTTPS: All communications encrypted via SSL/TLS
• Access Control: Strict authentication and authorization checks

4.2 Data Retention

We retain your information for as long as your account is active or as needed to provide services. You may request account deletion at any time, after which your data will be permanently removed from our systems within 30 days.

5. Email Service Provider

We use Mailgun as our email service provider for sending transactional emails. When we send you an email, your email address is shared with Mailgun solely for the purpose of delivery. Mailgun's use of your information is governed by their own privacy policy.

Email Use:

• Your email is collected only when you register
• We never sell, rent, or share your email with third parties for marketing
• All emails are transactional and service-related only
• During development, email is used primarily for developer testing

6. Third-Party Services

6.1 Google OAuth

If you choose to sign in with Google, we receive limited information from Google (email address, profile information) according to Google's privacy policies. We do not store your Google password.

6.2 Hosting and Infrastructure

Our platform is hosted on secure cloud infrastructure. Our hosting providers have access to server data but are contractually obligated to maintain confidentiality and security.

7. Cookies and Tracking

We use cookies for essential functionality:

• Authentication Cookies: Keeping you logged in securely (httpOnly refresh tokens)
• Session Cookies: Maintaining your session state
• Preference Cookies: Remembering your settings

We do not use tracking cookies for advertising or analytics purposes at this time.

8. Your Rights and Choices

You have the following rights regarding your personal information:

• Access: Request a copy of your personal data
• Correction: Update incorrect or incomplete information
• Deletion: Request deletion of your account and data
• Export: Receive your data in a portable format
• Opt-out: You cannot opt-out of transactional emails (account verification, security alerts) as they are essential for service functionality

To exercise these rights, please contact us through the platform or email us.

9. Children's Privacy

Our service is not intended for users under the age of 18. We do not knowingly collect personal information from children. If we discover that we have collected information from a child under 18, we will delete it immediately.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.

11. Data Breach Notification

In the event of a data breach that affects your personal information, we will notify you via email within 72 hours of discovering the breach, along with information about what data was affected and steps we are taking to address it.

12. Changes to Privacy Policy

We may update this Privacy Policy as our platform evolves. Material changes will be communicated via email or through a prominent notice on our platform. The "Last Updated" date at the top will reflect the most recent changes.

13. Legal Compliance

We are committed to full compliance with applicable data protection laws including GDPR, CCPA, and other international privacy regulations. As we expand our services, we will maintain and enhance our compliance measures.

14. Contact Information

For questions about this Privacy Policy or to exercise your privacy rights, please contact us through our platform or visit cryptosystems.ai.