Privacy Policy

Last updated: February 2026

1. Introduction

Cryptobi ("we", "us", "our") operates the Cryptobi financial analytics platform. This Privacy Policy explains how we collect, use, and protect your personal data in compliance with the EU General Data Protection Regulation (GDPR) and other applicable privacy laws.

2. Data We Collect

Account Data

• Email address — used for login, verification, and report delivery
• Password — stored as a one-way bcrypt hash (we cannot read your password)
• Country — provided during registration for localized content

Usage Data

• IP address — for security (rate limiting, abuse prevention)
• Pages visited — for analytics and improving the platform
• Device info — browser user-agent for session management

Financial Data

• Symbol selections — which assets you track (stored in your collection)
• Report configurations — your custom reports and schedules

We do not collect or store payment card details. All payment processing is handled by Stripe.

3. How We Use Your Data

• To provide and maintain the platform
• To authenticate your identity and manage your account
• To deliver scheduled reports via email
• To detect and prevent abuse, fraud, and security threats
• To improve the platform based on usage patterns (aggregated, anonymized)

4. Legal Basis for Processing (GDPR)

• Contract — processing necessary to provide our service to you
• Legitimate interest — security monitoring, abuse prevention, platform improvement
• Consent — optional cookies and marketing communications (where applicable)

5. Data Retention

• Account data — retained while your account is active; deleted upon account deletion
• Usage/visit logs — retained for up to 12 months, then automatically purged
• Security audit logs — retained for up to 24 months for compliance
• Payment logs — retained for up to 7 years as required by tax law

6. Your Rights (GDPR)

You have the right to:

• Access — download all your personal data (Settings → Export My Data)
• Rectification — update your email, password, and preferences in Settings
• Erasure ("Right to be Forgotten") — delete your account and all associated data (Settings → Delete Account)
• Portability — export your data in machine-readable JSON format
• Object — contact us to object to specific processing activities

7. Data Security

We protect your data with:

• Encrypted database connections (TLS)
• Password hashing (bcrypt)
• CSRF protection on all forms
• Rate limiting on authentication endpoints
• Security headers (HSTS, CSP, X-Frame-Options)

8. Cookies

We use essential cookies only. See our Cookie Policy for details.

9. Third-Party Services

• Stripe — payment processing (Stripe Privacy Policy)

10. Contact

For privacy inquiries or to exercise your rights, contact us at: privacy@cryptobi.com