Privacy Policy — Crypto Analyst
This policy covers the app (app.gocryptoanalyst.com) and the paid service. If you only joined the waitlist, the waitlist notice at /privacy.html continues to apply to you, and this document does not replace it.
Portuguese version — controlling. In case of any difference, the Portuguese version prevails.
P.1 Who is the controller
Gabriel Caruccio, operating as kTCH Data Studio, in Brazil. Contact for personal data matters: privacy@gocryptoanalyst.com (EN) · privacidade@gocryptoanalyst.com (PT).
P.2 What we process
| Data | Where it comes from |
|---|---|
| Email and access credentials | you, at sign-up |
| The content of your analyses and chat | you, when you use the app |
| Assets, time frames and schedules | you, when you configure them |
| Usage records (quota, dates) | generated by the system |
| Billing country (the last known) | Stripe, at checkout |
| Customer identifier and subscription status | Stripe |
| Referral code and link | you, when you refer someone |
We do not store your card number. Payment is processed by Stripe.
P.3 Why we process it, and on what basis
| Purpose | Legal basis (LGPD, art. 7) |
|---|---|
| Create and maintain your account and deliver the service | performance of a contract (V) |
| Bill and manage the subscription | performance of a contract (V) |
| Send operational notices (billing, price changes, security) | performance of a contract and legal obligation (II, V) |
| Send news and marketing | your consent (I), which you can withdraw at any time |
| Prevent fraud and abuse | legitimate interest (IX) |
| Comply with tax and legal obligations | legal obligation (II) |
P.4 Who we share it with
| Who | For what | Where |
|---|---|---|
| Supabase | database and authentication | Brazil (São Paulo) |
| Stripe | payment and subscription | United States and European Union |
| Resend | sending email | United States |
| DeepSeek (default provider) | generating the analyses and replying in the chat | China |
| OpenAI | generating the analyses and replying in the chat | United States |
| jsDelivr, unpkg and Iconify | delivering the app's code libraries and icons to your browser | content delivery networks, in several countries |
⚠️ The text you write in the chat and the parameters of your analysis are sent to an artificial intelligence provider so that the reply can be generated. Each request goes to only one of them, DeepSeek or OpenAI. According to the policy DeepSeek has published, it stores the data it processes in the People's Republic of China. Do not send sensitive personal data, passwords or information about other people in that field.
jsDelivr, unpkg and Iconify receive your IP address and browser data when you open the app. They do not receive the content of your analyses.
We do not sell or rent your data.
P.5 International transfer
Part of the processing takes place outside Brazil: sending email, payment, generating the analyses (in the United States and China), and delivering the app's libraries. The transfer is necessary to perform the contract you entered into with us (LGPD, art. 33, IX, read with art. 7, V). Without it, the service does not work.
P.6 How long we keep it
| Data | Period |
|---|---|
| Account and subscription | as long as the account exists |
| Analysis history | the most recent records, according to your plan's limit |
| After you close your account | 90 days, then deletion |
| Tax and payment records | for the period the law requires |
| Marketing email | until you withdraw consent |
P.7 Your rights
Under art. 18 of the LGPD you may, at any time: confirm that we process your data; access it; correct it; request anonymization, blocking or deletion; request portability; know who we share it with; withdraw consent; and object to processing. Ask at privacy@gocryptoanalyst.com, free of charge.
If you are in the European Union or the United Kingdom, equivalent rights apply under local law.
P.8 Cookies and measurement
On our website (gocryptoanalyst.com), we use Plausible Analytics, which measures audience without cookies and without identifying you. In the app, we use no third-party measurement tool. We use only your browser's local storage, strictly necessary to keep you signed in.
P.9 Security
Authenticated access, encrypted traffic, and role-based restriction of access to the database. No system is immune. If a significant incident occurs, we will notify you and the authority as the law requires.
P.10 Minors
The service is not intended for anyone under 18 and we do not knowingly collect data from that age group.
P.11 Changes
We notify you by email before significant changes and before any change of purpose.