Privacy Policy
Last updated: 10/23/2026
1. Data We Collect
Account data: email address and password hash (bcrypt) when you sign up. Optional profile fields you provide (Telegram username for alerts). Usage data: API call counts for rate limiting, alert configurations you create, watchlists and portfolios you save. Payment data: plan and subscription status — card details are processed by our payment gateway (Midtrans/Tripay) and never touch our servers. Market data we display is public and contains no personal information.
2. How We Use It
Authentication and account security. Enforcing plan rate limits. Delivering alerts you configured to your Telegram. Processing payments and activating subscriptions. Improving the Service in aggregate (never sold, never shared with advertisers).
3. Cookies
A single HttpOnly session cookie (nexus-session) keeps you signed in. No third-party tracking cookies, no advertising pixels. Analytics are first-party pageview counts only.
4. Data Sharing
We share data only with processors required to run the Service: the payment gateway (to take your payment), the SMTP provider (to send verify/reset emails), and Telegram (to deliver alerts you asked for). No sale of personal data, ever.
5. Retention & Deletion
Account data is kept while your account exists. Delete your account by emailing [email protected] — we remove your profile, alerts, keys, and watchlists within 30 days. Anonymized market-signal history (no personal data) may be retained for calibration. Payment records are kept 7 years for tax compliance.
6. Security
Passwords are bcrypt-hashed, sessions are HttpOnly cookies, API keys are stored hashed, integration secrets are AES-256-GCM encrypted at rest. No system is impenetrable; report vulnerabilities to [email protected].
7. Your Rights
Request a copy, correction, or deletion of your personal data at any time via [email protected]. EU/UK users: our lawful basis is contract performance (account, billing) and consent (alerts). You may withdraw consent by disabling alerts or deleting your account.
8. Contact
Privacy questions: [email protected]