Privacy Policy

3.8. Google User Data

This section applies when you sign in to AxiPivot with your Google account. It describes how the Service handles the data it receives from Google (“Google user data”).

• Data accessed. AxiPivot asks Google only for the basic sign-in permissions: openid, email and profile. Google passes us your Google account identifier, your e-mail address and whether it is verified, your name and a link to your profile picture. We get no access to your Gmail, contacts, calendar, Drive or any other Google service, and we never see your Google password.
• Data usage. The identifier and e-mail address are used only to create your AxiPivot account, sign you in and send you service messages about your account, payments or these terms; a one-way hash of the e-mail address is also used to prevent repeated free trials and to credit the partner who referred you (§2.2). Your name and profile picture are not used by the Service. Google user data is never used for advertising, profiling or training AI models.
• Data sharing. We do not sell, rent or trade Google user data and do not share it with anyone for their own purposes. It is processed only by the providers that run the Service on our behalf, and only as far as needed for that: Supabase (authentication and database), Vercel and Cloudflare (hosting and network) and Resend (delivery of e-mails to your address). It may also be disclosed when the law requires it.
• Data storage and protection. Google user data is stored with your account in our managed database (Supabase). It is encrypted in transit (HTTPS/TLS) and at rest; database access rules let each user read only their own data, and administrative access is limited to the operators of the Service.
• Retention and deletion. Google user data is kept while your account exists. Deleting the account in Settings → Account erases it together with the account; only the one-way hash of the e-mail address described above is kept (§3.4), and the address cannot be recovered from it. You can also revoke AxiPivot’s access at any time at myaccount.google.com/permissions or ask us to delete your data at support@axipivot.com.
• Limited Use. AxiPivot’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is used only to provide and protect the sign-in and account features described above. It is never sold, never used or transferred for advertising or to decide credit-worthiness or lending, and never used to develop, improve or train AI or machine-learning models.

3.1. What Data We Collect

• Account data: e-mail address and, for Google sign-in, the basic profile data Google passes on (identifier, e-mail, name and profile picture — see §3.8); a Telegram identifier if you link the bot for notifications; if two-factor authentication is on, the authentication provider stores the factor itself and we store only one-way hashes of your recovery codes — never the codes and never the authenticator secret;
• Service content: your portfolios, positions and trades, watchlists, tags and presets, the public wallet addresses you add, settings, recommendation history, notification templates and AI request usage counters; AXiV API keys — only a one-way hash of each key, its name and first characters — and the count of API requests for the current minute and day;
• Billing data: the invoices you create, plan, amount, currency, payment status and the transaction identifier from the payment provider, the promo or referral discount applied, plus the timestamp and IP of your no-refund consent. We do not receive or store card numbers or your wallet's private keys;
• Affiliate data (partners only): the application form you submit (description, channel links, Telegram and e-mail contacts), referral codes, attributed referrals, commissions and the payout wallet address you provide;
• Launch notification (only if you leave your e-mail on the home page before the launch): the e-mail address, the language of the page and when the address was left and confirmed;
• Technical data: service logs, request and operation timestamps, errors, IP address and rate-limit counters — used for security, anti-fraud and diagnostics; when you start a trial, a one-way hash of your network address and of a random marker stored in your browser — to limit repeated trials.

3.2. Why We Use It

• to provide functionality (calculations, notifications, rebalancing, AI analysis);
• to save your settings across sessions and devices;
• to process payments, apply discounts and confirm access to the paid plan;
• to run the affiliate program and check it for abuse;
• with your consent, given by ticking the box in the form, to send the launch notification: an e-mail to confirm the address and one e-mail on launch day, with a discount code for early subscribers;
• to diagnose errors, protect the service and improve it;
• to send service messages related to your account, payments or the terms.

3.3. Where Data Is Stored and Who It Is Shared With

Data is stored in a managed cloud database (Supabase) and processed on the hosting and edge infrastructure used by the Service (Vercel and Cloudflare); Vercel also counts visits for anonymous statistics (see 3.6). Payments are processed by NOWPayments; market and on-chain data is loaded from providers such as CoinGecko, CoinGlass and on-chain data services; the e-mail the Service sends — sign-in codes, notifications, the launch notification and replies to support requests — is delivered by Resend; Cloudflare Turnstile checks that the sign-in form and the launch notification form are filled in by a person; notifications may also be delivered through Telegram. AI features send the request content to the model provider (Anthropic): the coin data, your question, and — for follow-up questions about a coin — your holding in that coin, so that the answer fits your position. Nothing else from your account is sent there. We do not sell and do not share your personal data with third parties for marketing purposes. Disclosure is possible only: (a) with your explicit consent; (b) as required by law; (c) to infrastructure and payment providers — to the extent necessary for the service to function.

3.4. Retention Period

Data is stored for as long as you use the service. Deleting the account ends access and erases its contents at the same moment, permanently: we keep no copy in case you change your mind. Only what has a reason survives it: records we are legally required to keep, payment records above all; amounts owed to you and to the partner who referred you under the affiliate program, so that a deletion does not erase what we owe; the fact that this e-mail has already had a plan and a trial, without which deleting and signing up again would be a way to take the trial a second time; and anonymised aggregates that cannot identify you. These records hold no personal data — an internal id, amounts and dates. The hashes of the network address and the browser marker recorded when a trial starts are deleted after 30 days. An address left for the launch notification is deleted once the launch e-mail has been sent; an unconfirmed one, 7 days after the last confirmation link. You can remove your address earlier at any time with the link in the confirmation e-mail.

3.5. Your Rights

You may request access to your data, its correction, export, or deletion by writing to support@axipivot.com. Where applicable data protection legislation applies (e.g., GDPR), you may contact the relevant supervisory authority.

3.6. Cookies and Local Storage

The Application sets no cookies. Data is kept in your browser's localStorage and falls into two categories:

• Strictly necessary — the sign-in session, interface language, appearance, sidebar state and the cache of already loaded requests. Without them the service you asked for does not work, so they are stored without separate consent.
• Optional — partner attribution: the referral code from an invitation link, stored for up to 90 days so the partner who invited you is credited and your discount is applied. It is stored only with your consent, which you give in the banner on your first visit and may withdraw at any time in Settings → Account.

Visits are counted for anonymous statistics with Vercel Web Analytics, without cookies and without identifiers. For each page view it records the page address without its parameters, the site you came from, the country and region worked out from the network address, and the type of device, operating system and browser. Visitors are told apart by a hash of the request, which is discarded after 24 hours; the network address itself is not stored. We see only totals — how many people come, from where and to which pages — and cannot tell who a particular visitor is. No advertising trackers are used.

3.7. Children

The Service is not intended for persons under 18. If we learn that an account belongs to a minor, it will be deleted.