Legal

Privacy Policy

Effective: March 2026  ·  Version 1.4

This Privacy Policy explains how CryptoIntel collects, uses, stores, and protects information when you access the platform — including its web application, REST API, enterprise services, and associated infrastructure. CryptoIntel is designed with a data-minimisation philosophy: we collect only what is necessary to operate and improve the platform.

01 Platform Overview & Data Context

CryptoIntel is a cryptocurrency news intelligence platform aggregating content from public RSS news feeds, market data for the top 500 digital assets from CoinGecko, keyword sentiment on every headline and AI sentiment analysis through Groq. Understanding the architecture — detailed at /architecture — is relevant to understanding what data flows through the system:

  • — News content passes through server-side RSS parsers, gets a keyword sentiment score, and is cached. When you ask for AI analysis, the headline and article text (never anything about you) are sent to Groq. No user-identifiable data is appended to this pipeline.
  • — Market data is fetched server-side from CoinGecko and cached. User queries do not trigger direct calls to third-party market APIs.
  • — TradingView chart widgets are rendered client-side and are subject to TradingView's own privacy policy.
  • — API consumers interact with our endpoints directly. Request metadata (IP address, timestamp, endpoint, response code) appears in Vercel's standard request logs.

02 Information We Collect

Information you provide directly

  • — Contact form submissions (name, email, company, enquiry type, message) submitted via /contact.
  • — Request Access form submissions (name, email, company, interest area, use case description) submitted via /request-access.
  • — Newsletter waitlist sign-ups (email address only) from the home page.
  • — Enterprise and acquisition enquiry details submitted through the Enterprise portal at /enterprise.

Information collected automatically

  • — Standard web server logs: IP address, browser user-agent, referring URL, requested path, HTTP status code, and timestamp. Logs are retained for up to 30 days for security purposes.
  • — Vercel platform analytics (aggregated, anonymised page view and performance data). Individual users are not identified in these analytics.

Browser-stored data

  • — Watchlist preferences (selected assets) are stored in browser local storage on your device. This data is never transmitted to CryptoIntel servers.
  • — Filter selections and chart toggles live only in the open page and are not stored.

03 How We Use Your Information

  • — To respond to contact, enterprise, and access request enquiries.
  • — To process and evaluate API access requests, enterprise licensing negotiations, and acquisition enquiries.
  • — To detect abuse and protect platform integrity.
  • — To monitor system health and performance via aggregated, anonymised telemetry.
  • — To comply with legal obligations, regulatory requirements, and court orders where applicable.

We do not sell, rent, or trade personal data to third parties. We do not use personal data for advertising or profiling purposes.

04 Cookies & Tracking

CryptoIntel uses minimal, strictly necessary cookies only. We do not deploy third-party advertising cookies, retargeting pixels, or behavioural tracking technologies. The following limited cookies may be set:

  • — Session cookies for basic navigation state (no persistent identifiers).
  • — Vercel infrastructure cookies necessary for edge function routing and performance optimisation.
  • — TradingView widget cookies, governed by TradingView's own cookie policy, set client-side when chart components are rendered.

05 Third-Party Integrations

The platform integrates with the following third-party services, each operating under their own privacy policies:

  • — CoinGecko — market data API (server-side only; no user data transmitted).
  • — TradingView — chart widgets rendered client-side; subject to TradingView's privacy policy.
  • — Vercel — hosting, edge network, and anonymised analytics infrastructure.
  • — RSS News Publishers (CoinDesk, CoinTelegraph, Decrypt, Bitcoin Magazine, NewsBTC, The Block, Crypto Briefing) — content aggregated server-side via public RSS feeds.
  • — Groq — AI analysis. Receives headlines and article text when analysis is requested. No user data is sent.
  • — alternative.me — Fear & Greed Index (server-side only; no user data transmitted).
  • — Formspree — contact, access request and newsletter waitlist submissions are processed by this form provider.

06 Enterprise & API Consumer Data

Enterprise clients, white-label licensees, and API consumers are subject to additional data processing terms set out in their respective Master Service Agreements (MSA). In the context of enterprise engagements:

  • — Business contact information provided during acquisition or licensing negotiations is retained for the duration of those negotiations and for up to 3 years thereafter for audit purposes.
  • — API keys are not issued yet. If they are introduced, issuance will require a valid business email address and agreed terms.
  • — White-label deployments operate on dedicated infrastructure; user data generated within those deployments is the responsibility of the licensee as the independent data controller.

07 Data Retention

  • — Contact and enquiry form data: retained for up to 2 years or until the purpose for which it was collected is fulfilled.
  • — Server access logs: retained for 30 days then purged.
  • — Enterprise engagement records: retained for up to 7 years for legal and audit compliance.
  • — Browser-stored data (watchlist, UI prefs): persists on your device until cleared; not stored on our servers.

08 Compliance & Legal Basis (GDPR)

For users in the EU and UK, our lawful basis for processing personal data is as follows:

  • — Legitimate interests — server log retention for security, abuse detection, and platform integrity.
  • — Contract performance — processing enquiry data to respond to and fulfil enterprise, licensing, and access requests.
  • — Legal obligation — retaining enterprise records for tax, audit, and regulatory compliance purposes.

A full compliance overview, including jurisdiction-specific data handling practices, is available at /compliance.

09 Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

  • — Right of access — request a copy of personal data we hold about you.
  • — Right to rectification — request correction of inaccurate data.
  • — Right to erasure — request deletion of your data, subject to legal retention obligations.
  • — Right to data portability — receive your data in a structured, machine-readable format.
  • — Right to restrict processing or object — where processing is based on legitimate interests.

To exercise any of these rights, contact us at privacy@cryptointel.dev. We will respond within 30 days.

10 Security

CryptoIntel is deployed on Vercel's global edge infrastructure with HTTPS enforced on all endpoints. Third-party credentials stay on the server and are never sent to the browser. Despite these measures, no transmission over the internet is entirely secure, and we cannot guarantee absolute security. In the event of a data breach affecting personal data, we will notify affected individuals and relevant authorities in accordance with applicable law.

11 Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in platform functionality, data practices, or legal requirements. Material changes will be flagged with a revised "Effective" date. Continued use of the platform after an update constitutes acceptance of the revised policy. Enterprise clients will be notified of material changes via the contact details held in their MSA.

12 Contact

Privacy enquiries: privacy@cryptointel.dev. Enterprise data processing enquiries: /enterprise. General contact: /contact.