Legal
Privacy Policy
This privacy policy explains what data CryptoSignal Pro collects, why, and how it is protected.
1. What We Collect
Account Data
When you register, we collect your email address and, if you choose OAuth, the minimal profile data your provider (Google or GitHub) shares: name, email, and avatar URL.
Usage Data
We log pages visited, features used, signal analysis requests, and performance metrics (page load times, error rates). This data is not linked to identifiable profiles unless you are logged in.
Exchange API Keys
If you connect an exchange for automation, we store your API key and secret encrypted at rest using AES-256. We never store keys in plaintext and never use them beyond the scope of your configured trading actions.
Payment Data
We do not store card numbers. Subscription billing is handled by our payment processor. Crypto payments are processed via NOWPayments. We only store the outcome (plan, expiry, payment method type).
2. How We Use It
Authentication
Your email is used to create and secure your account, and to send critical account notifications (email verification, password resets, billing alerts).
Signal Generation
Usage data and exchange connections are used solely to generate, route, and log signals for your account. We do not share your trading activity.
Platform Improvement
Aggregated, anonymized usage patterns help us identify which features need improvement. No individual-level data is used for this purpose.
3. Data Storage
Database
All account and signal data is stored in PostgreSQL, hosted on infrastructure that encrypts data at rest. Backups are encrypted separately.
API Keys
Exchange API keys are stored encrypted using AES-256 with per-user key derivation. Decryption only occurs within the trade execution process.
Retention
Account data is retained as long as your account is active. Signal logs are retained for 24 months. You may request deletion at any time.
4. Third Parties
OAuth Providers
If you sign in with Google or GitHub, their OAuth flow is used. We receive only the email and profile fields you authorize. We do not receive your OAuth provider password.
Payment Processor
Subscription payments are handled by a PCI-compliant payment processor. Crypto payments via NOWPayments. Neither provider shares card or wallet details with us.
Analytics
We use privacy-respecting analytics tools. Analytics scripts are loaded only after consent where required by applicable law. IP addresses are anonymized.
6. Your Rights (GDPR)
Right to Access
You may request a full export of the personal data we hold about you at any time by emailing privacy@cryptosignalpro.com.
Right to Delete
You may request account deletion at any time from Settings. All personal data is removed within 30 days.
Right to Export
Signal history, alert configurations, and account settings can be exported in JSON format from your dashboard Settings page.
Right to Object
You may opt out of any non-essential data processing (analytics, product emails) at any time from Settings.
7. Contact
Privacy Contact
For privacy questions, data requests, or deletion requests, email privacy@cryptosignalpro.com. We aim to respond within 5 business days.
Questions about this policy?
privacy@cryptosignalpro.com