BTCbeat

1. What We Collect

Email or phone number — used as your login identifier and for delivering alert notifications and account credentials.

Payment proof — on-chain transaction hashes for USDT/USDC transfers. We do not collect or store credit card numbers, banking details, or private wallet keys.

Push channel credentials — webhook URLs / bot tokens for DingTalk, Feishu, Telegram, Bark, etc. These are encrypted at rest and used solely to deliver alerts you configure.

Usage data — alert rules you create, alert delivery logs, and aggregated statistics displayed on the dashboard.

2. How We Use Your Data

• Authenticate your account and manage your subscription
• Deliver BTC price alerts via your chosen push channels
• Maintain permanent, auditable settlement history (public market data from Binance)
• Prevent fraud, rate-limit abuse, and enforce geographic restrictions

3. What We Do NOT Do

• We do not sell, rent, or share your data with third parties
• We do not store your private keys or seed phrases
• We do not use tracking pixels or third-party analytics on this site
• We do not offer investment advice — all alerts are informational

4. Data Retention

Account data is retained while your subscription is active and for 30 days after expiry. Settled window history (public Binance market data) is kept permanently for auditability. You may request deletion of your account and associated data at any time.

5. Security Measures

• HTTPS with HSTS (max-age 2 years, includeSubDomains)
• Content-Security-Policy restricting all resource origins
• JWT-based authentication; passwords hashed with bcrypt
• Push channel credentials encrypted at rest (Fernet, AES-128-CBC)
• IP-based geographic blocking for restricted jurisdictions (HTTP 451)
• Rate limiting on registration, login, and order endpoints

6. Your Rights

• Access — request a copy of your personal data
• Correction — update your email, password, or push channel settings
• Deletion — request permanent deletion of your account and data
• Export — download your alert rules and delivery logs

To exercise any of these rights, contact us using the details below.

7. Cryptocurrency Payments

USDT (TRC-20) and USDC (Polygon PoS) payments are processed on-chain. Transaction hashes are public record. We auto-detect payments by polling TronGrid and Blockscout APIs. We do not custody funds — payments go directly to our published wallet addresses.

8. Changes to This Policy

We may update this policy as the service evolves. Material changes will be communicated via email to registered users. Continued use after changes constitutes acceptance.