1. Introduction

Tickory ("we", "our", "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you use our Service.

2. Information We Collect

2.1 Information You Provide

Account Information: Email address, password (hashed), subscription tier
Billing Information: Payment details processed through third-party payment processors (Paddle)
Scan Configurations: Your custom scan rules, alert settings, and webhook URLs

2.2 Information Collected Automatically

Usage Data: Scan execution logs, alert delivery logs, API requests
Technical Data: IP address, browser type, device information, timestamps
Performance Data: Scan execution times, error logs, system health metrics

2.3 Third-Party Data

We collect cryptocurrency market data from Binance and other exchanges. This data is publicly available and not personally identifiable.

3. How We Use Your Information

We use your information to:

Provide and maintain the Service
Execute your scans and deliver alerts
Process payments and manage subscriptions
Send service notifications and updates
Monitor system performance and diagnose issues
Prevent fraud and abuse
Comply with legal obligations

4. Data Sharing and Disclosure

We do NOT sell your personal data. We may share data with:

4.1 Service Providers

Payment Processor: Paddle (for billing and subscription management)
Infrastructure: Cloud hosting providers (AWS, Vercel, etc.)
Email Delivery: Email service providers for alert delivery
Analytics: Privacy-friendly analytics (Plausible, no personal data shared)

4.2 Legal Requirements

We may disclose your information if required by law, court order, or government request, or to protect our rights and safety.

4.3 Business Transfers

If we are acquired or merged, your information may be transferred to the new entity under the same privacy protections.

5. Data Security

We implement industry-standard security measures:

Encryption in transit (TLS/HTTPS) and at rest
Password hashing using bcrypt
JWT-based authentication with secure token handling
Tenant isolation to prevent cross-user data access
Rate limiting and abuse prevention
Regular security audits and updates

However, no system is 100% secure. You are responsible for maintaining the confidentiality of your credentials.

6. Data Retention

Account Data: Retained while your account is active
Scan Execution Logs: Retained for 90 days
Alert Delivery Logs: Retained for 30 days
Billing Records: Retained for 7 years for tax/legal compliance

After account deletion, we anonymize or delete your data within 30 days, except where retention is required by law.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

Access: Request a copy of your personal data
Correction: Update or correct inaccurate data
Deletion: Request deletion of your account and data
Export: Download your scan configurations and data
Objection: Object to certain data processing activities

To exercise these rights, contact us at hello@tickory.com

8. Cookies and Tracking

We use minimal tracking:

Essential Cookies: Authentication tokens (JWT) to maintain your session
Analytics: Privacy-friendly analytics (Plausible) that don't use cookies or track individuals

We do NOT use third-party advertising cookies or tracking pixels.

9. International Data Transfers

Your data may be processed in countries outside your own. We ensure adequate data protection through:

Using service providers with GDPR-compliant data processing agreements
Implementing standard contractual clauses where required

10. Children's Privacy

Our Service is not intended for users under 18. We do not knowingly collect data from children. If you believe we have inadvertently collected such data, contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or in-app notification at least 30 days before taking effect.

12. Contact Us

For privacy-related questions or to exercise your rights, contact us at: hello@tickory.com