Privacy Policy
Last updated: October 12, 2025
1. Introduction
CryptoNomadHub ("we", "our", "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.
2. Information We Collect
2.1 Information You Provide
- Account Information: Email address, password (hashed)
- Profile Data: Current country of residence
- Payment Information: Processed securely by Paddle (we do NOT store credit card details)
- Simulation Data: Tax simulation inputs (countries, amounts, dates)
- DeFi Audit Data: Wallet addresses, blockchain transaction data
- Chat Messages: Questions and conversations with our AI assistant
2.2 Information Collected Automatically
- Usage Data: Pages visited, features used, time spent
- Device Information: IP address, browser type, operating system
- Cookies: Session cookies for authentication and functionality
- Log Data: API requests, errors, performance metrics
3. How We Use Your Information
We use the information we collect to:
- Provide, operate, and maintain the Service
- Process your tax simulations and DeFi audits
- Manage your account and subscription
- Send you service updates, security alerts, and administrative messages
- Respond to your comments, questions, and support requests
- Monitor and analyze usage patterns to improve the Service
- Detect, prevent, and address technical issues and fraud
- Comply with legal obligations
4. Data Storage and Security
Where We Store Data:
- Servers located in secure data centers (Europe/US)
- Database: PostgreSQL with encryption at rest
- Backups: Encrypted daily backups with 7-day retention
Security Measures:
- HTTPS encryption for all data transmission
- Password hashing using bcrypt
- Rate limiting to prevent abuse
- Regular security audits and monitoring
- Access controls and authentication
Important: No security system is 100% secure. We cannot guarantee absolute security of your data.
5. How We Share Your Information
We do NOT sell your personal data. We may share data with:
5.1 Service Providers
- Paddle: Payment processing (Merchant of Record)
- Sentry: Error tracking and monitoring
- Email Service: Transactional emails (verification, password reset)
- Cloud Infrastructure: Hosting and storage providers
5.2 Legal Requirements
We may disclose your information if required by law, court order, or government request, or to protect our rights, property, or safety.
6. Blockchain and Wallet Data
Important Notice:
- When you provide a wallet address for DeFi audit, we query public blockchain data
- Blockchain data is publicly accessible by anyone
- We store wallet addresses and transaction data to provide the audit service
- This data may include transaction amounts, timestamps, and protocol interactions
- You can delete your audit data anytime from your account
7. Your Privacy Rights
You have the right to:
- Access: Request a copy of your personal data
- Correction: Update or correct inaccurate data
- Deletion: Request deletion of your account and data
- Export: Download your simulation and audit data
- Opt-out: Unsubscribe from marketing emails (we send very few)
- Portability: Receive your data in a machine-readable format
To exercise these rights, contact us at [email protected]
8. Data Retention
We retain your data for as long as your account is active, plus:
- Account Data: Until you delete your account + 30 days
- Simulation History: Until you delete or close account
- Payment Records: 7 years (legal requirement)
- Log Data: 90 days
- Backups: 7 days rolling retention
9. Cookies and Tracking
We use cookies for:
- Essential Cookies: Authentication, session management (required)
- Analytics Cookies: Understanding usage patterns (can be disabled)
- Preference Cookies: Remembering your settings
You can control cookies through your browser settings. Disabling essential cookies may affect functionality.
10. Third-Party Links
The Service may contain links to third-party websites (e.g., Paddle payment page, government tax authority sites). We are not responsible for the privacy practices of these sites. We encourage you to read their privacy policies.
11. Children's Privacy
The Service is not intended for users under 18 years of age. We do not knowingly collect data from children. If we discover we have collected data from a child, we will delete it immediately.
12. International Data Transfers
Your data may be transferred to and stored in countries other than your own. These countries may have different data protection laws. By using the Service, you consent to such transfers.
13. GDPR Compliance (EU Users)
If you are in the European Union, you have additional rights under GDPR:
- Right to be informed about data processing
- Right to access your data
- Right to rectification
- Right to erasure ("right to be forgotten")
- Right to restrict processing
- Right to data portability
- Right to object to processing
- Right to withdraw consent
Legal Basis for Processing: Contract performance, legal obligations, and legitimate interests
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by updating the "Last updated" date and, for significant changes, by email or prominent notice on the Service.
15. Contact Us
If you have questions about this Privacy Policy or want to exercise your privacy rights, contact us at:
Email: [email protected]
Data Protection Officer: [email protected]
Address:
CryptoNomadHub
[Your Company Address]
Seychelles
Privacy in Summary
- We collect only what's necessary to provide the Service
- We do NOT sell your data to third parties
- Your data is encrypted and securely stored
- You can delete your account and data anytime
- We comply with GDPR and data protection laws