Privacy policy

Who this notice covers

AutoSignal is responsible for the account and service information described in this notice. It applies to website visitors, account holders, paying customers, referral partners, developer users and people who contact us or submit a startup application.

It covers AutoSignal’s handling of information, not the independent practices of an exchange, blockchain explorer or another website you visit. Market tools do not require access to your exchange account, contacts, camera, microphone or precise device location.

Accounts and authentication

We store account email, an optional username, a password hash for email sign-in, verification status, plan and access dates, trial eligibility, terms-acceptance date and version, and your email preferences. Google sign-in supplies a verified account identifier and email; it does not give AutoSignal access to Gmail or Drive.

Sessions use protected account cookies and server-side token records. Account and verification emails are used to deliver codes and important service messages. Promotional emails are optional, are separate from access, and can be changed in Account. Existing preferences are not changed simply because you sign in.

Payments and subscription records

Card details are collected by Stripe through its secure checkout fields. AutoSignal stores order and subscription references, selected plan and duration, amounts, payment status, renewal or cancellation state, and access dates. We do not receive your full card number or CVC.

Crypto invoices and verification records include the token, network, expected amount, receiving details and transaction reference. Blockchain activity is public and may reveal addresses, amounts and timing. We do not collect wallet recovery phrases, private keys or exchange trading credentials.

Referrals and receiving wallets

Referral records include the partner’s code and chosen display name, visits attributed through a referral cookie, the account attributed at signup, payment-derived commission, hold and adjustment records, and withdrawal status. A random HttpOnly referral cookie lasts up to 30 days; the server stores its hash rather than the browser token.

Partners see anonymous referral labels, registration dates, current plans, verification status and commission information. They do not receive a referred customer’s email, wallet address or payment-provider reference. An optional signup code can be cleared before signup to opt out of a pending link attribution.

Your payout wallet, token and chain are private to you and authorized administrators. They are used to prepare manual transfers and payment records, including transaction references. Administrators can export payout details for manual reconciliation. A partner who opts into the public leaderboard shares their chosen name, code, paying-referral count and earned commission; they can disable future listing in Referrals. Copies already saved or shared by others may remain.

Usage and reliability information

We collect first-party activity information such as an anonymous browser identifier, page visits, visit times and counts, and signed-in account activity. We also record operational failures and market-data request information needed to monitor delivery, diagnose faults and protect the service.

Requests and live subscriptions include selected markets, studies and settings. Our infrastructure and service providers receive connection information such as IP addresses, request headers and timing. AutoSignal does not provide an account-level search-history or portfolio-import feature. First-party usage measurement is separate from advertising; we do not sell personal information or operate an advertising-audience feature.

Cookies and local preferences

Necessary cookies support sign-in, verification, referral attribution, access limits and trial protection. A separate visitor cookie supports the first-party usage measurement described above. Account sessions last up to 30 days, Google challenges up to ten minutes, referral attribution up to 30 days, and reader, visitor and trial-protection cookies up to one year. Their purpose and expiry differ.

Your browser also stores preferences such as theme, motion, keyboard shortcuts, chart settings, drawings, templates and notification choices, and may cache recent chart or market responses. These stay until removed, replaced or cleared under the browser’s storage rules. Clearing browser storage can sign you out and reset local choices; it does not delete your server-side account.

Security and trial checks

We use rate limits, verification checks, hashed identity records and security events to prevent account abuse, repeated free trials and unauthorized access. Where configured, Cloudflare Turnstile checks requests, and IPinfo checks network characteristics for trial eligibility. These providers receive the connection information needed for the check.

Password-breach checks send only a short prefix of a password hash to Have I Been Pwned, not the password or full hash. Automated protection may restrict a request or trial. You can ask AutoSignal to review an account issue; passing a trial check does not guarantee paid access or a trading result.

Support and startup applications

Support messages can include sender and recipient details, subject, message text, delivery identifiers and authentication results. Incoming messages are available only to authorized administrators. We do not automatically load message HTML or download attachments.

Startup applications include the account email, business name, website, revenue stage and proposal you submit. We use this information to review eligibility and respond to the application. Do not include unrelated sensitive personal information in a proposal or support message.

API keys and notifications

Developer-key records include a key hash, account association, label, expiry and revocation status, request counts and last-use time. The complete key is shown when issued and should be stored securely by you. Revocation stops later access but does not erase existing usage or billing records.

Browser notifications require your permission and can be disabled in browser settings or Account. Notification text may be visible on your device. A notification preference does not give AutoSignal access to unrelated notifications or other apps.

Why information is processed

Account, entitlement, payment and referral information is used to provide the services you request and meet our agreement with you. Security, reliability and proportionate first-party usage processing supports legitimate interests in operating and protecting AutoSignal. Payment, dispute and financial records may also be needed to meet applicable legal obligations.

Where consent is required, including optional promotional messages, we rely on your choice and provide a way to withdraw it. Withdrawing an optional choice does not undo earlier lawful processing. We do not use private passwords, card data or support messages as inputs to market-prediction models.

Service providers and disclosures

Information is shared with providers only as needed for their functions: hosting and network delivery, identity verification, email delivery, account protection, payment processing, blockchain verification and operational support. Examples include Cloudflare, Google, Resend, Stripe, IPinfo and Have I Been Pwned when the relevant feature is configured.

Some coin images load from external hosts, which receive normal connection information. We may disclose relevant records where legally required, to address fraud or security incidents, or to establish and defend legal rights. We do not publish private account, support or payout records as market data.

International processing and security

Providers may process information in countries other than where you live. Where applicable law requires safeguards for a transfer, those requirements apply to the relevant processing. This notice does not promise that all data stays in a particular country.

We use access controls, protected credentials, password and token hashing, restricted administration and recovery backups. These measures reduce risk but cannot guarantee absolute security. Never send secrets through a chart search, support message or referral field.

Retention

Account and preference records are kept while needed to provide access and manage your relationship with AutoSignal. Payment, referral, withdrawal and manual-transfer records may be retained after access ends to reconcile balances, handle disputes, prevent fraud and meet applicable accounting or legal requirements. Support messages and applications are retained while needed to handle the request and related obligations.

Temporary verification and session records expire under their own rules. Security events are kept for 30 days; network trial records for seven days. Hashed trial-eligibility identifiers can be kept to prevent repeat trials. Some first-party activity aggregates and recovery backups are retained beyond the browser-cookie expiry; signing out does not erase them. Other records are kept according to their operational purpose and applicable obligations rather than an invented universal deletion deadline.

Your choices and rights

You can manage email and notification choices, cancel eligible card renewals, revoke API keys, change local preferences and disable a public referral listing. You can request access, correction, deletion, restriction, objection or portability where applicable law provides those rights, and withdraw processing consent where it is the basis used.

Contact AutoSignal using the contact details in your account or payment communications and identify the account and request. We may need to verify account control. Deletion can be limited by financial, fraud-prevention or legal requirements; retained backups are not erased by signing out or clearing browser storage. Blockchain transactions and copies independently held by another party cannot be erased by AutoSignal. You may complain to the relevant data-protection authority where that right applies.

Children and changes

AutoSignal is intended for adults and is not directed to children. If you believe a child has supplied account information, contact AutoSignal so the circumstances can be reviewed.

This page is dated to identify the notice version. Material changes to information handling will be explained where required. The Privacy Policy describes processing; it does not turn a mandatory service message or essential security check into optional marketing consent.