Privacy Policy

1 Overview & Scope

CryptoSignalClub operates an algorithmic crypto signal intelligence and market research platform. We respect your privacy and are committed to maintaining transparent, responsible data collection practices.

This Privacy Policy applies to all users, visitors, registered free preview accounts, and active VIP members accessing cryptosignalclub.com and any related subdomains, APIs, or authenticated dashboards (collectively, the "Platform").

2 Personal Data We Collect

We collect only the information necessary to provide, secure, and manage your account and subscription access:

• Account & Identity Information: When you register or sign in, we collect your email address and display name. If you authenticate through Google OAuth, we receive your verified Google account email, name, and profile picture avatar URL as authorized by your Google account settings.
• Authentication Data: We utilize a passwordless authentication flow. We generate and temporarily store cryptographically random 6-digit One-Time Passwords (OTP) and single-use magic login tokens. These tokens expire automatically within 15 minutes and are invalidated immediately upon verification.
• Referral Program Data: Every registered user is assigned a unique 7-8 character alphanumeric referral code. If you register through an existing member's referral link, we record the referral association, conversion timestamps, and associated promotional subscription credit balances.
• Device, Network & Session Telemetry: To secure your account against unauthorized access, we record your IP address, browser user-agent string, operating system, and login timestamps. We maintain an active session log enabling you to review all active device sessions and terminate unauthorized sessions directly from your dashboard.
• First-Party Analytics Data: Our client-side analytics beacon records anonymous page views, referral clicks, navigation interactions, and marketing campaign parameters (e.g. UTM source, medium, campaign) to analyze aggregate platform usage.
• Payment & Invoice Records: When purchasing a membership, transactions are processed via our cryptocurrency payment gateway partner (NOWPayments). We store non-sensitive transaction records including NOWPayments invoice IDs, payment status (`waiting`, `confirming`, `finished`, `expired`, `failed`), chosen cryptocurrency (e.g., USDT, BTC, LTC), fiat amount ($40.00 USD), and blockchain transaction hashes for verification and accounting.

3 How We Use Your Data

We use collected personal information strictly for legitimate operational, security, and contractual purposes:

• Account Management & Authentication: Delivering email verification codes and magic sign-in links to securely authenticate your session.
• Signal Access Delivery: Verifying active subscription entitlement to unlock unmasked coin symbols, exact entry prices, +5% take-profit targets, and -5% stop-loss execution levels.
• Payment Verification: Processing server-side webhook notifications from NOWPayments to activate or renew subscriptions upon verified blockchain confirmation.
• Referral Reward Accounting: Calculating and crediting $10 promotional referral credits toward eligible membership renewals when referred users complete qualifying payments.
• Platform Security & Abuse Prevention: Enforcing rate limits on authentication endpoints (e.g., 10 requests/minute), detecting suspicious brute-force activity, preventing duplicate checkouts, and stopping fraudulent multi-account manipulation.
• Transactional Communication: Sending essential service notices, invoice status updates, and critical security alerts.

4 Authentication & Security Practices

We implement industry-standard technical and organizational security measures to protect your personal data:

• No Plaintext Password Storage: Our platform is entirely passwordless. Because we do not store static passwords, your account cannot be compromised through credential stuffing or leaked password databases.
• Encrypted Transport: All web traffic is strictly transmitted over HTTPS with Transport Layer Security (TLS 1.2+).
• Cryptographic Webhook Verification: All incoming payment callbacks from NOWPayments are validated server-side using HMAC-SHA512 signature verification to prevent spoofing.
• Session Revocation Controls: Users can inspect IP addresses, browser types, and last-activity timestamps for every active login session from the dashboard, and instantly terminate individual or stale sessions.

5 Cookies & Telemetry

We utilize first-party cookies and browser local storage strictly for functional and security operations:

We do not use third-party behavioral advertising cookies or participate in cross-site tracking ad networks.

6 Third-Party Service Providers

To deliver our services, we partner with reputable third-party infrastructure providers who process data strictly on our behalf under confidentiality obligations:

• NOWPayments (Payment Gateway): Facilitates non-custodial cryptocurrency invoice creation, coin conversion, and blockchain payment confirmations. NOWPayments processes your public wallet address and transaction data in accordance with their privacy policy.
• Google (OAuth Authentication): If you choose Google Sign-In, Google processes your authentication tokens to verify your identity.
• Transactional Email Providers (SMTP / Mail Delivery): Delivers time-sensitive OTP login codes and transactional notifications to your email inbox.
• Market Data Feeds (Binance & TradingView): We query publicly available market ticker APIs to compute algorithmic signals and render technical chart links. No personal user data is transmitted to market data providers.

7 Data Retention & Deletion

We retain personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy:

• Active Accounts: User profiles, subscription histories, and referral associations are retained for the duration of your account's lifecycle.
• Authentication Tokens: OTP verification codes and magic links are permanently purged or invalidated after 15 minutes.
• Session Records: Terminated and stale device session tokens are pruned regularly.
• Analytics Logs: Telemetry event logs are periodically aggregated and pruned to remove obsolete granular IP data.

8 Your Privacy Rights

Depending on your location and applicable data protection laws (such as GDPR or CCPA), you may have the following rights regarding your personal data:

• Right to Access: You may request a copy of the personal data we hold about you.
• Right to Rectification: You may request corrections to any inaccurate or incomplete personal information.
• Right to Erasure (Deletion): You may request the deletion of your account and associated personal data, subject to necessary legal, tax, or fraud prevention retention requirements.
• Right to Restrict Processing: You may object to or request limitations on specific data processing activities.

To exercise any of these rights, please email our support team at support@cryptosignalclub.com. We will respond to verified requests within 30 days.

9 International Transfers & Children's Privacy

Our platform and servers operate globally. If you access the Platform from outside the server hosting region, your information may be transferred across international borders in compliance with standard data protection standards.

CryptoSignalClub is not directed to or intended for individuals under the age of 18 (or the age of legal majority in your jurisdiction). We do not knowingly collect personal data from minors. If we discover that a minor has provided us with personal data, we will promptly delete such records.

10 Contact & Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our platform architecture, legal requirements, or service offerings. When updates occur, the "Last Revised" date at the top of this document will be updated.

For privacy inquiries, data subject access requests, or security concerns, contact us at: