1. Introduction

CryptoNavi ("we", "our", or "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.

2. Information We Collect

2.1 Information You Provide

• Account Information: Email address, username, password (hashed)
• Profile Data: Display name, avatar (optional)
• User Content: Reviews, comments, watchlist selections
• Newsletter: Email address when you subscribe

2.2 Automatically Collected Information

• Usage Data: Pages visited, features used, timestamps
• Device Information: Browser type, operating system, device type
• Log Data: IP address, access times, referring URLs

3. How We Use Your Information

We use your information to:

• Provide, maintain, and improve the Service
• Personalize your experience (watchlists, recommendations)
• Send you updates, alerts, and newsletters (with consent)
• Detect and prevent fraud, abuse, and manipulation
• Comply with legal obligations
• Analyze usage patterns to improve the platform

4. Data Sharing

We do NOT sell your personal data. We may share information with:

• Service Providers: Hosting (Vercel), database (Supabase), analytics
• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In connection with a merger or acquisition

5. Your Rights (GDPR)

If you are in the EU/EEA, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data ("right to be forgotten")
• Restrict Processing: Limit how we use your data
• Data Portability: Receive your data in a portable format
• Object: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw consent at any time

To exercise these rights, contact us through our platform.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including encryption, secure authentication, and access controls. However, no method of transmission over the Internet is 100% secure.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. When you delete your account, we will delete or anonymize your personal data within 30 days.

8. Cookies

We use essential cookies for authentication and session management. We do not use third-party tracking cookies without your consent. You can control cookies through your browser settings.

9. Third-Party Links

Our Service may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.

10. Children's Privacy

Our Service is not intended for users under 18 years of age. We do not knowingly collect personal data from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on our platform or sending an email.

12. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us through our platform.