Privacy Policy

The data controller is [Company legal name], [registered address], reachable at [contact email]. This policy explains what we collect and your rights under the GDPR.

We process the following data:

• Account: email, name (optional), password (hashed), and how you heard about us.
• Security: two-factor settings, sign-in activity (IP, user agent, timestamps).
• Billing: subscription status and plan; card payments are handled by Stripe — we do not store your card number.
• Exchange keys: API keys you connect, encrypted at rest; used only to read your account and place orders you request.

• To provide the service and your account — performance of a contract.
• To process payments and issue invoices — contract and legal obligation.
• To secure accounts and prevent abuse — legitimate interest.
• For optional marketing emails — your consent, withdrawable at any time.

We share data only with processors that help us run the service, including [Stripe] (payments), [Billingo] (invoicing), our email provider, and our hosting provider. They process data on our instructions under appropriate agreements. We do not sell your data.

We keep account data while your account is active and as required for legal/accounting purposes (e.g. invoices). When you delete your account, we erase your profile, exchange keys, billing link, and activity, except records we must retain by law.

You have the right to access, rectify, export, and delete your data, to restrict or object to processing, and to withdraw consent. You can export or delete your data yourself from Account → Settings → Privacy & data, or contact [contact email]. You may also lodge a complaint with your local data protection authority (in Hungary, the NAIH).

We protect data with encryption at rest for sensitive fields (including exchange keys), hashed passwords, optional two-factor authentication, and access controls. No system is perfectly secure, but we take reasonable measures to safeguard your information.

We use essential cookies to keep you signed in and to operate the site. We do not use them for advertising. Where required, we ask for your consent before non-essential cookies.

We may update this policy; material changes will be communicated where appropriate. Questions about your data: [contact email].