Privacy Policy

Last updated: April 25, 2026

Effective Date: April 25, 2026

SimpleCryptoAnalytics is committed to your privacy. We collect only what we need to deliver the Service, we never sell your data to third parties, and we give you full control over your personal information.

1. Who We Are

SimpleCryptoAnalytics ("SCA", "we", "us", "our") is a private data analytics service. For all privacy inquiries or data requests, contact us at support@simplecryptoanalytics.com.

2. What Data We Collect

We collect only the minimum data necessary to operate the Service:

Account Data

Email address, hashed password (never stored in plaintext), account creation date, user number, and subscription/payment status. If you sign in with Google OAuth, we receive your name and email from Google.

Service Preferences

Telegram Chat ID, signal types and thresholds, coin selections, and flow threshold settings you configure.

Usage Data

Signal creation timestamps, trigger history, and feature interactions — used solely to operate and improve the Service. We do not sell or share this data.

Technical Data

IP address, browser type, and device information collected automatically for security and fraud prevention purposes. Not used for advertising.

Payment Data

Subscription status only. Full payment card details are processed by Stripe and never stored on our servers.

3. How We Use Your Data

We use your data exclusively for:

  • Authenticating your account and providing access to the Service.
  • Delivering on-chain signals to your Telegram channel.
  • Processing subscription payments via Stripe.
  • Sending service-related emails (account confirmation, password reset, billing notices).
  • Detecting and preventing fraud, abuse, and security incidents.
  • Improving signal quality and platform performance using anonymized, aggregated data.
  • Complying with applicable legal obligations.

We will never use your personal data for advertising, behavioral profiling, or sale to third parties — for any reason.

4. We Do Not Sell Your Data

SCA does not sell, rent, lease, broker, or share your personal data with any third party for commercial or marketing purposes — ever. This applies under the California Consumer Privacy Act (CCPA), the General Data Protection Regulation (GDPR), and as an absolute matter of our own policy regardless of your jurisdiction.

5. Third-Party Service Providers

We share data with the following processors only to the extent necessary to deliver the Service:

SupabaseDatabase and authentication hosting (SOC 2 Type II certified, PostgreSQL)
VercelWeb application hosting and CDN delivery
StripePayment processing — card data never touches our servers
ResendTransactional email delivery (confirmations, password resets)
TelegramSignal delivery to your private channel via bot API
AlchemyEthereum blockchain data — no user personal data is transmitted
CoinGecko / CoinbasePrice data feeds — no user personal data is transmitted

We do not use advertising networks, behavioral analytics platforms, or data brokers of any kind.

6. Your Privacy Rights (GDPR & CCPA)

Regardless of where you are located, you have the following rights over your personal data:

Right to Access

Request a complete copy of all personal data we hold about you, delivered within 30 days.

Right to Deletion

Request permanent deletion of your account and all associated personal data. We will comply within 30 days. Note: anonymized or aggregated data that cannot identify you individually is not subject to deletion.

Right to Correction

Request correction of any inaccurate or incomplete personal data we hold.

Right to Portability

Receive your data in a structured, machine-readable format (JSON/CSV).

Right to Restrict Processing

Request that we pause processing of your data for specific purposes while a dispute is resolved.

Right to Object

Object to processing of your personal data in certain circumstances.

Right to Opt-Out

Unsubscribe from all service communications at any time. This does not delete your account.

Right to Non-Discrimination

We will never provide a lower quality of service or penalize you for exercising any privacy right.

To exercise any right, email support@simplecryptoanalytics.com with the subject "Privacy Request — [Right Type]". We respond within 30 days as required by CCPA and GDPR.

7. Data Retention Policy

Active account dataRetained while your account remains open and active.
Deleted account dataPermanently purged from all systems within 30 days of receiving a verified deletion request.
Payment and billing recordsRetained for 7 years as required by financial regulations (tax compliance). Card details are never stored by us — only Stripe holds these.
Server access logsAutomatically deleted after 90 days.
Signal historyRetained while your account is active. Deleted when your account is deleted.

8. Security

  • All data is encrypted in transit using TLS 1.3 and at rest using AES-256.
  • Our database (Supabase) is SOC 2 Type II certified with row-level security (RLS) policies enforced.
  • Passwords are hashed by Supabase Auth using bcrypt — we never have access to your plaintext password.
  • Authentication sessions use short-lived JWTs with secure HTTP-only cookies.
  • We conduct regular security reviews of third-party dependencies and access controls.

9. Cookies

We use only essential session cookies required for authentication and maintaining your logged-in state. We do not use advertising cookies, behavioral tracking pixels, analytics tracking scripts, or any third-party tracking of any kind. You may disable cookies in your browser settings, but this will prevent the login functionality from working.

10. Children's Privacy

SCA is intended only for users 18 years of age or older. We do not knowingly collect personal data from anyone under 18. If we become aware that we have collected data from a user under 18, we will delete that data immediately and terminate the associated account.

11. International Data Transfers

SCA's infrastructure is primarily based in the United States. If you are accessing from the European Union, United Kingdom, or any other jurisdiction, your personal data may be transferred to and processed in the US. By using SCA you consent to this transfer. Where required by GDPR, we rely on Standard Contractual Clauses (SCCs) for transfers outside the European Economic Area.

12. Jurisdiction-Specific Privacy Notices

🇮🇳 India — IT Act & DPDP Act Notice

SCA processes personal data of Indian users in compliance with India's Digital Personal Data Protection (DPDP) Act, 2023 and the Information Technology Act, 2000. Indian users have the right to access, correct, and erase their personal data. SCA is not registered with SEBI and provides data services only. Requests from Indian users may be submitted to support@simplecryptoanalytics.com.

🇸🇬 Singapore — PDPA Notice

SCA processes personal data of Singapore users in accordance with the Personal Data Protection Act 2012 (PDPA). Singapore users have the right to access and correct their personal data, and to withdraw consent for non-essential processing. SCA is not licensed by MAS and does not conduct any regulated activity in Singapore. Data requests may be directed to support@simplecryptoanalytics.com.

🇭🇰 Hong Kong — PDPO Notice

SCA processes personal data of Hong Kong users in compliance with the Personal Data (Privacy) Ordinance (Cap. 486) (PDPO). Hong Kong users have the right to access, correct, and request deletion of their personal data held by SCA. SCA is not licensed by the SFC and provides data for research purposes only. Data access requests may be directed to support@simplecryptoanalytics.com.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or in-app notification at least 30 days before the changes take effect. The updated effective date will always appear at the top of this page. Continued use after the effective date constitutes acceptance of the updated policy.

15. Contact Us

For all privacy requests, questions, or concerns — including exercising any of your rights under GDPR or CCPA:

support@simplecryptoanalytics.com

Subject line: "Privacy Request" — We respond within 30 days.

SCA / DPA — Simple Crypto Analytics (SCA) and the Dark Pool Audit (DPA) are research and forensic data platforms. We do not provide investment, financial, tax, or legal advice. SCA is not a registered intermediary with SEBI, MAS, or the SFC. All insights and data points are provided exclusively for research purposes. Users assume all risk associated with the application of this intelligence.