Privacy Policy

1. Information We Collect

Account information: When you create an account, we collect your email address and a hashed password. You may optionally provide a phone number for SMS alerts.

Preferences: Trading style, alert settings, quiet hours, watchlist, and commission rate you configure in Settings.

Alert history: A log of SMS alerts sent to you (symbol, price, timestamp) for your reference.

Usage data: When analytics are enabled, we collect anonymous usage data (page views, feature interactions) via PostHog. No individual trading decisions or portfolio information are tracked. You can opt out via the cookie banner.

2. Legal Basis for Processing (GDPR)

We process your data under the following legal bases:

• • Contract performance: Account data and preferences needed to provide the CoinPulse service
• • Consent: SMS alerts (explicit opt-in with TCPA consent), analytics cookies (opt-in via banner)
• • Legitimate interest: Service improvement based on aggregate, anonymized usage patterns

3. How We Use Your Information

• • To provide and maintain the CoinPulse service
• • To send SMS alerts if you opt in and verify your phone number
• • To personalize signal thresholds based on your trading style
• • To improve the product based on aggregate usage patterns

4. What We Do Not Collect

• • We do not collect brokerage credentials or account information
• • We do not access your Robinhood or any other trading account
• • We do not track your trades or portfolio holdings
• • We do not sell or share your personal information with third parties for marketing

5. Data Storage and International Transfers

Your data is stored using Supabase (hosted on AWS in the United States). If you are located outside the US, your data is transferred to and processed in the US. We rely on Supabase's and AWS's standard contractual clauses and security certifications for lawful international data transfer.

We use industry-standard encryption for data in transit (TLS) and at rest (AES-256). SMS alerts are delivered through Twilio, which maintains its own SOC 2 compliance.

6. Data Retention

• • Account data: Retained while your account is active. Deleted immediately when you delete your account.
• • Alert history: Retained for up to 90 days after account deletion for dispute resolution, then permanently deleted.
• • Deletion feedback: The reason you select when deleting your account is retained in anonymized form (email only) for product improvement.
• • Analytics data: Anonymous, aggregated, not linked to your account after deletion.

7. Third-Party Services

• • Supabase — authentication and data storage (AWS US-West)
• • Twilio — SMS alert delivery and phone verification
• • Vercel — website hosting (edge network)
• • Railway — backend API hosting
• • PostHog — anonymous product analytics (when enabled)
• • Resend — transactional email delivery
• • Binance / Coinbase — public market data (no account connection)

Each third-party service processes data under its own privacy policy. We do not share your personal data beyond what is necessary for each service to function (e.g., Twilio receives your phone number only if you opt into SMS).

8. Your Rights

Depending on your location, you may have the following rights:

• • Access and portability: Download all your data from Settings at any time.
• • Rectification: Update your email, phone, preferences, and watchlist in Settings.
• • Deletion: Delete your account and all associated data from Settings. This is immediate and irreversible.
• • Withdraw consent: Disable SMS alerts in Settings or reply STOP to any message. Disable analytics via the cookie banner.
• • Restrict processing: Pause all alerts in Settings without deleting your account.
• • Complaint: You have the right to lodge a complaint with your local data protection authority.

9. Cookies and Tracking

CoinPulse uses essential cookies for authentication (Supabase session tokens). These are required for the service to function and cannot be disabled.

Optional analytics cookies (PostHog) are only activated with your consent via the cookie banner. You can change your preference at any time.

10. California Residents (CCPA)

If you are a California resident, you have the right to know what personal information we collect, request its deletion, and opt out of its sale. We do not sell personal information. To exercise your rights, use the self-serve options in Settings or contact us.

11. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via email or a notice on the site. Continued use after changes constitutes acceptance.

12. Contact

For privacy questions or to exercise your rights, contact privacy@getcoinpulse.com