Privacy Policy

1. Who We Are

ScanEX ("we", "us", "our") operates the real-time cryptocurrency intelligence platform available at scanex-landing.vercel.app and its associated services. For any privacy-related questions, contact us at support@scanex.io.

2. What Data We Collect

We collect the minimum data necessary to provide and operate the Platform:

• Email address — collected when you register for an account, used to identify your account and communicate with you about your subscription.
• Authentication data — login sessions and authentication tokens, managed by our authentication provider Clerk. We do not store passwords ourselves.
• Subscription and billing data — your subscription plan, billing status, and subscription history. Payment card details are processed and stored exclusively by Stripe — we never receive or store your full card number, CVV, or other sensitive payment data.
• Usage data — technical logs including IP addresses, browser type, pages visited, features used, and timestamps. This data is used to maintain platform security, diagnose issues, and improve the service.
• User preferences — dashboard settings and configuration options you save within the platform, stored to provide a consistent experience across sessions and devices.
• Support communications — messages you send us via our support form or email, retained to resolve your queries.

We do not collect cryptocurrency wallet addresses, transaction histories, trading activity on external platforms, or any data about your financial holdings outside of your ScanEX subscription.

3. How We Use Your Data

We process your data for the following purposes:

• Providing the service — managing your account, processing your subscription, and giving you access to the Platform.
• Account communications — sending subscription confirmations, renewal reminders, payment receipts, and important service updates.
• Security and fraud prevention — detecting and preventing unauthorized access, abuse, or misuse of the Platform.
• Service improvement — analysing aggregated, anonymised usage patterns to improve performance and features.
• Legal compliance — complying with applicable laws, regulations, and lawful requests from authorities.
• Support — responding to your queries and resolving issues.

We do not use your data for advertising, sell your data to third parties, or use your data to train AI models.

4. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA) and United Kingdom, our legal basis for processing your personal data is:

• Contract — processing your email and subscription data is necessary to fulfill our contract with you (your subscription agreement).
• Legitimate interests — processing usage logs and technical data to maintain platform security, prevent fraud, and improve the service.
• Legal obligation — retaining certain records as required by applicable law.

5. Third-Party Service Providers

We use the following third-party providers to operate the Platform. Each processes data only as necessary to provide their respective service:

Provider	Purpose	Data shared
Clerk	Authentication & identity management	Email address, session data
Stripe	Payment processing & subscription billing	Email, billing info (card details stored by Stripe only)

We also use third-party providers for infrastructure hosting, content delivery, security protection, and AI-powered features. These providers process data only as necessary to deliver their services and are bound by appropriate data processing agreements. No personal data is shared with AI providers — only anonymised market data is used for token analysis features.

We do not share your personal data with any other third parties without your consent, unless required by law.

6. Data Retention

We retain your data for as long as your account is active. Specifically:

• Account data (email) — retained for the duration of your subscription and deleted within 30 days of account deletion.
• Billing records — retained for up to 7 years as required by applicable financial regulations.
• Usage logs — retained for up to 90 days for security and diagnostic purposes, then deleted or anonymised.
• Support communications — retained for up to 2 years after resolution.

7. Your Rights

Depending on your location, you have the following rights regarding your personal data:

• Right of access — request a copy of the personal data we hold about you.
• Right to rectification — request correction of inaccurate or incomplete data.
• Right to erasure ("right to be forgotten") — request deletion of your personal data. We will delete your account and all associated data within 30 days, subject to retention obligations.
• Right to data portability — request your data in a structured, machine-readable format.
• Right to object — object to processing based on legitimate interests.
• Right to restrict processing — request that we limit how we use your data in certain circumstances.

To exercise any of these rights, contact us at support@scanex.io. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.

8. Cookies

We use a minimal set of cookies necessary to operate the Platform:

• Authentication cookies — set by Clerk to maintain your login session. These are strictly necessary and cannot be disabled without logging you out.
• Preference cookies — storing your dashboard settings and preferences.

We do not use advertising cookies, tracking pixels, or third-party analytics cookies that track you across websites. You can manage cookies through your browser settings.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, misuse, or disclosure. Our security practices are regularly reviewed and updated in line with industry standards.

No system is completely secure. In the event of a data breach affecting your rights and freedoms, we will notify you and relevant authorities within 72 hours as required by applicable law.

10. International Data Transfers

Where your personal data is transferred outside the European Economic Area, we ensure appropriate safeguards are in place, including Standard Contractual Clauses or other mechanisms as required by applicable data protection law.

11. Children

The Platform is not intended for use by anyone under 18 years of age. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected data from a minor, please contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice on the Platform. The date of the latest update is shown at the top of this page. Continued use of the Platform after changes are posted constitutes your acceptance of the revised Policy.

13. Contact Us

For any privacy-related questions, requests, or concerns:

• Email: support@scanex.io
• Support form: scanex-landing.vercel.app/support.html

This Privacy Policy is provided for informational purposes. For specific legal advice regarding data protection compliance in your jurisdiction, consult a qualified legal professional.