Privacy Policy

1. Who we are and how to reach us

Infraviewer LTD is the data controller for personal data processed in connection with the Service. You can contact our privacy team at privacy@cryptopricing.net with any question, request, or concern relating to this policy. When we refer to "personal data" we mean any information relating to an identified or identifiable natural person, as that term is defined under the UK GDPR, the EU GDPR, and similar laws.

2. Scope

This policy applies to visitors of our website, users of our APIs, subscribers to our newsletters or alerts, and anyone who interacts with Infraviewer LTD through customer support or social media. It does not apply to third-party websites or services that we link to or embed - those services are governed by their own privacy policies, and we encourage you to review them before providing any personal data.

3. Information we collect

We collect personal data in three ways: (a) information you give us, (b) information collected automatically, and (c) information we receive from third parties.

3.1 Information you give us

• Account information - when you register for an account we collect your email address, a hashed password, and any optional profile details you choose to provide (such as display name or avatar).
• Communication data - when you contact us via email, our support form, or social media we record the contents of your message along with relevant metadata.
• Preference data - your watchlist entries, saved searches, alert configurations, theme choice, and in-product settings.
• Payment data - if we introduce paid features, we will collect payment instrument details through a third-party processor who is itself a controller for that data.

3.2 Information collected automatically

• Device and usage data - IP address, approximate location derived from that IP, browser type and version, operating system, device identifiers, referrer URL, pages viewed, actions taken, and timestamps.
• Cookies and similar technologies - we use first-party and third-party cookies, local storage, and similar technologies to remember preferences, measure performance, and protect the Service. See our Cookie Policy for details.
• Log data - server logs recording requests to our infrastructure, which we retain for security, debugging, and capacity-planning purposes.

3.3 Information from third parties

We may receive personal data from third-party data providers (for example, analytics platforms, anti-fraud services, or social-login providers where supported). We process that data in accordance with this policy and with our agreements with those providers.

4. How we use personal data

We use personal data for the following purposes and rely on the indicated lawful bases under the UK and EU GDPR:

• Providing the Service - to create and maintain your account, deliver product features, and respond to your requests. Lawful basis: performance of a contract.
• Improving the Service - to analyse usage patterns, diagnose bugs, test new features, and plan capacity. Lawful basis: legitimate interest.
• Communicating with you - to send transactional messages (password resets, security alerts), policy changes, and, where you have opted in, marketing or product news. Lawful basis: performance of a contract and, for marketing, consent.
• Security and fraud prevention - to detect, investigate, and prevent abuse, unauthorised access, or other harmful activity. Lawful basis: legitimate interest and legal obligation.
• Legal compliance - to comply with applicable law, respond to lawful requests, and enforce our agreements. Lawful basis: legal obligation.

5. How we share personal data

We do not sell personal data. We share personal data only in the limited circumstances described below and only to the extent reasonably necessary for the relevant purpose.

• Service providers - we share personal data with vendors who help us run the Service (cloud hosting, email delivery, analytics, customer support, fraud prevention). These vendors are bound by contract to process personal data only on our instructions and to implement appropriate security measures.
• Business transfers - in the event of a merger, acquisition, reorganisation, or sale of assets, personal data may be transferred as part of the transaction. We will notify you of any such change and your options.
• Legal and safety - we may disclose personal data if we believe in good faith that disclosure is necessary to comply with law, enforce these Terms, or protect the rights, property, or safety of Infraviewer LTD, our users, or others.
• With your consent - we may share personal data for any other purpose disclosed to you when you provide it, subject to your consent.

6. International data transfers

Infraviewer LTD is headquartered in the United Kingdom, but our service providers may operate elsewhere (including the European Economic Area and the United States). When we transfer personal data outside the UK or the EEA we rely on appropriate safeguards such as the UK International Data Transfer Agreement, the EU Standard Contractual Clauses, or an adequacy decision. You may request a copy of the safeguards applicable to a specific transfer by contacting privacy@cryptopricing.net.

7. Retention

We keep personal data only for as long as is necessary for the purposes described in this policy, unless a longer retention period is required or permitted by law. Typical retention periods are:

• account and profile data - for the life of the account plus 12 months;
• support communications - for up to 36 months;
• server logs - for up to 13 months;
• anonymised analytics - indefinitely.

8. Security

We implement administrative, technical, and physical safeguards designed to protect personal data against unauthorised access, loss, alteration, and destruction. These include encryption in transit, least-privilege access controls, independent security reviews, and regular backups. However no system is 100% secure; if we detect an incident that materially affects your personal data we will notify you and the competent supervisory authority where required by law.

9. Your rights

Depending on where you live you may have the following rights over your personal data:

• Access - obtain a copy of the personal data we hold about you.
• Rectification - correct inaccurate or incomplete personal data.
• Erasure - request deletion of personal data in certain circumstances.
• Restriction - limit how we process your personal data.
• Portability - receive your personal data in a structured, commonly-used, machine-readable format.
• Objection - object to processing based on our legitimate interests or direct marketing.
• Withdraw consent - where processing is based on consent, withdraw that consent at any time.

You may exercise these rights by emailing privacy@cryptopricing.net. We will respond within one month (extendable by up to two additional months for complex requests). You also have the right to lodge a complaint with your local supervisory authority, such as the UK Information Commissioner’s Office (ICO).

9.1 California residents

If you are a California resident the California Consumer Privacy Act (CCPA), as amended by the CPRA, gives you additional rights, including the right to know, delete, correct, and opt out of the "sale" or "sharing" of personal information for cross-context behavioural advertising, as well as the right to limit the use of sensitive personal information. We do not sell personal information for money and do not engage in cross-context behavioural advertising. You can submit a verifiable consumer request at privacy@cryptopricing.net.

10. Children’s privacy

The Service is not directed at children under 16 and we do not knowingly collect personal data from anyone under that age. If you believe a child has provided us with personal data please contact us and we will take appropriate steps to delete it.

11. Third-party services

Our site may embed content, widgets, or analytics scripts from third parties. Those third parties may independently collect information about you. We encourage you to review the privacy policies of any third-party service before interacting with it.

12. Automated decision-making

We do not use personal data for automated decision-making that produces legal or similarly significant effects on you. Some features (for example, anti-abuse protections) rely on automated analysis of activity, but a human review is available on request.

13. Do Not Track

Because no consistent industry standard has emerged, the Service does not currently respond to "Do Not Track" browser signals. We do, however, honour the opt-outs described in our Cookie Policy.

14. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will change the "Last updated" date at the top of this page and, where appropriate, provide additional notice (for example, through the Service or by email). Material changes will not apply retroactively to personal data collected before the change unless required by law.

15. Contact

Questions about this Privacy Policy or about our data practices? Please contact us:

Infraviewer LTD - Data Protection
Email: privacy@cryptopricing.net