Privacy Policy

Your privacy is a priority. This policy explains what data we collect, why we collect it, how we use it, and your rights regarding it. We follow GDPR principles and treat your data with respect.Effective Date: April 27, 2026.

Information you provide directly:

• Email address (required for registration)
• Phone number (optional, for SMS verification)
• Country and timezone (for localization)
• Display name and bio (optional public profile)
• Payment details — processed securely by payment providers, not stored by us

Information collected automatically:

• IP address and general location (country/city level)
• Browser type, operating system, device type
• Login timestamps and session duration
• Pages visited and features used within Nezsig
• Signal interaction data (views, saves, trade tracking)
• Performance data and error logs

We use your data strictly to operate and improve Nezsig:

• Account creation, authentication, and management
• Delivering trading signals and notifications (email, push, Telegram)
• Processing subscription payments and managing billing
• Providing customer support and responding to inquiries
• Security monitoring, fraud prevention, and abuse detection
• Analyzing aggregated usage patterns to improve features (anonymous)
• Sending product updates, important notices, and legal communications

We share your data only in these circumstances:

We use cookies and similar technologies for:

• Essential: Session management, authentication tokens, security — these cannot be disabled
• Functional: Remembering your preferences, dashboard layout, settings
• Analytics: Understanding how users navigate the platform (with your consent)
• Marketing: Personalized content and recommendations (with your consent)

You can manage cookie preferences at any time through the cookie banner or at Settings → Privacy → Cookie Preferences. Revoking analytics/marketing cookies does not affect core platform functionality.

We implement industry-standard security measures to protect your data:

• ✓256-bit TLS/SSL encryption for all data in transit
• ✓AES-256 encryption for sensitive data at rest
• ✓Bcrypt hashing for passwords (never stored in plaintext)
• ✓6-digit PIN verification for sensitive account actions and trades
• ✓Row-level security (RLS) on all database tables via Supabase
• ✓Two-factor authentication (TOTP) available to all users
• ✓Regular security audits and penetration testing
• ✓GDPR-compliant infrastructure based in EU (Frankfurt)

As a user in the European Union or under applicable data protection laws, you have the right to:

• Access: Request a copy of all personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your account and all associated data (Right to be Forgotten)
• Restriction: Request we limit processing of your data in certain circumstances
• Portability: Receive your data in a machine-readable format (JSON/CSV)
• Objection: Object to data processing based on legitimate interests
• Withdraw Consent: Revoke any previously given consent at any time

To exercise any right, contact us at [email protected] or use the self-service tools in Settings → Privacy. We respond within 30 days. You also have the right to lodge a complaint with your local Data Protection Authority.

Your data is primarily stored and processed in the EU (Frankfurt) via Supabase infrastructure. Some data may be transferred to:

• United States — when using Resend for email delivery (Standard Contractual Clauses apply)
• Any country — when using Binance API for auto-trade (you opt in explicitly)

All international transfers comply with GDPR Chapter V requirements. We use Standard Contractual Clauses (SCCs) as the legal mechanism for cross-border transfers.

Nezsig integrates with the following services, each with their own privacy policies:

• Supabase — database & authentication (privacy policy)
• Resend — transactional email delivery
• Binance — optional auto-trade integration (opt-in only)
• Vercel — hosting and edge network

Nezsig is intended for users 18 years of age and older. We do not knowingly collect personal data from minors. If we become aware that a user under 18 has registered, we will immediately delete their account and associated data. Parents or guardians who believe a minor has provided us with personal data should contact us at [email protected].

We may update this Privacy Policy periodically. When we make material changes, we will:

• ✓Send an email notification to all registered users
• ✓Display a prominent banner on the Nezsig platform
• ✓Provide at least 30 days notice before the change takes effect
• ✓Maintain a changelog of previous policy versions on request

• General privacy: [email protected]
• Data Protection Officer: [email protected]
• Security concerns: [email protected]