Privacy Policy

This Privacy Policy explains how CoinGarage s.r.o. (a company incorporated in the Czech Republic (EU), Company ID (IČO) 11667974) collects, uses, and shares personal information when you use Bitcoin Story at bitcoinstory.ai. We are the data controller.

1. Information we collect

• Account data: your email address and name, handled through our authentication provider (Clerk).
• Billing data: subscription status and a customer/payment reference. Payments are processed by Stripe; we do not receive or store your full card number.
• Product settings: preferences such as your alert thresholds.
• Usage and device data: log data, IP address, and basic analytics needed to operate and secure the service.

2. How we use it

• to provide the service (generate and deliver your reports, run your alerts, manage your subscription);
• to send service and product emails you have opted into (for example the daily digest and alerts);
• to secure, maintain, and improve the service;
• to comply with legal obligations.

3. Legal bases (EEA/UK users)

Where GDPR applies, we process personal data to perform our contract with you (providing the service), for our legitimate interests (security and improvement), with your consent (certain communications), and to meet legal obligations.

4. How we share it

We do not sell your personal information. We share it only with service providers who process it on our behalf, under contract, including:

• Clerk (authentication and account management);
• Stripe (payment processing);
• Resend (transactional and digest emails);
• Supabase (database hosting for report history);
• Vercel (application hosting);
• Anthropic (AI processing of market data to generate the report text).

We may also disclose information if required by law or to protect our rights and users.

5. Advertising and measurement

We use the Meta (Facebook) Pixel to measure the performance of our advertising. This may involve sharing limited event data (such as page views and whether you registered or subscribed) with Meta Platforms. Under California law (CPRA) this may be considered "sharing" for cross-context behavioral advertising. To opt out, email us at support@coingarage.io or use your browser and Meta ad-preference controls. We do not use this data to identify you to third parties beyond what is described here.

6. Cookies

We use cookies and similar technologies that are necessary to run the service (for example to keep you signed in) and, where applicable, the advertising cookie set by the Meta Pixel described above. We do not sell your personal information.

7. Data retention

We keep personal data only as long as needed: account data is deleted within 30 days of account closure; billing and tax records are retained up to 7 years to meet accounting and tax obligations; server logs are retained up to 90 days. We do not collect "sensitive personal information" as defined under the CPRA.

8. Your rights

Depending on where you live, you may have the right to access, correct, delete, or export your personal data, to object to or restrict certain processing, and to withdraw consent.

California residents (CCPA/CPRA):you have the right to know, delete, and correct your personal information and to opt out of "sale" or "sharing". We do not sell your personal information. We may "share" limited data with Meta for advertising measurement as described in section 5; you can opt out by emailing us. You will not be discriminated against for exercising these rights. You may use an authorized agent to submit a request; we may require proof of authorization and verification of your identity. We will confirm receipt within 10 business days and respond within 45 days (extendable once by a further 45 days with notice).

EEA/UK residents: you have the right to lodge a complaint with your local data protection authority; in the Czech Republic this is the Office for Personal Data Protection (Úřad pro ochranu osobních údajů, uoou.cz).

To exercise any right, contact us at support@coingarage.io.

9. International transfers

We are based in the EU and use providers that may process data in the United States and elsewhere. Where we transfer personal data outside the EEA, we rely on the European Commission's Standard Contractual Clauses or another lawful transfer mechanism.

10. Children

The service is not directed to children under 18 and we do not knowingly collect their data.

11. Security

We use reasonable technical and organizational measures to protect personal data. No method of transmission or storage is completely secure.

12. Changes and contact

We may update this policy and will note the date above. Questions or requests: support@coingarage.io.