Privacy Policy

1. Who We Are

The Bloxena platform at bloxena.com (the "Service") is operated by Bloxena FZCO, registered at Unit No: UT-12-CO-385, DMCC Business Centre, Level No 12, Uptown Tower, Dubai, United Arab Emirates ("Bloxena", "we", "us", or "our"). For the purposes of applicable data protection law, Bloxena FZCO is the data controller for personal data processed through the Service. This Privacy Policy explains what data we collect, why we collect it, and the choices you have.

2. Data We Collect

• Account data: your email address and authentication details when you sign up by email/OTP or via Google OAuth.
• Profile and settings: preferences you configure in the Service, such as notification settings, theme, and display options.
• Favorites and watchlists: the coins, projects, and watchlists you save so the Service can deliver research, alerts, and digests you request.
• Billing data: your subscription plan and payment status. Card details are collected and stored by Stripe, our payment processor. Bloxena never stores your card data.
• Usage analytics: anonymous, aggregated metrics about how the Service is used (pages visited, performance timings) collected via cookieless analytics.

3. How We Use Your Data

We use your data to provide and operate the Service, authenticate you, process subscription payments, deliver the research, alerts, and email digests you request, respond to support inquiries, monitor performance and prevent abuse, and comply with legal obligations. We do not sell your personal data.

4. Service Providers We Rely On

We share personal data only with the service providers that make the Service work, and only for the purposes described below:

• Supabase - authentication and database hosting. Handles email/OTP and Google OAuth sign-in and stores your account, settings, and watchlist data.
• Stripe - subscription billing and payment processing. Stripe receives and stores your payment details; Bloxena never stores card data.
• Vercel - application hosting, plus Vercel Analytics and Speed Insights for anonymous, cookieless usage and performance metrics.
• Resend - transactional email delivery, such as sign-in codes, alerts, and weekly digests.
• Upstash Redis - rate limiting to protect the Service and its API from abuse.

5. Cookies and Local Storage

The Service uses a small number of cookies, described in the cookie notice shown on your first visit: an authentication session cookie that keeps you logged in, short-lived affiliate tracking cookies for referral attribution, and a temporary cookie that remembers your selected plan during signup. Our analytics (Vercel Analytics and Speed Insights) are cookieless and collect anonymous metrics only. We also use your browser's local storage for preferences such as theme and dismissed notices; this data never leaves your browser.

6. Data Retention

We keep your personal data for as long as your account is active. If you request deletion of your account, we delete your personal data, except where we are required to retain certain records (for example, billing records) to comply with legal obligations.

7. Your Rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal data, and to object to or restrict certain processing. You can exercise these rights, including requesting a copy of your data or deletion of your account, by contacting us at michal@bloxena.com. We respond to verified requests within the timeframe required by applicable law.

8. International Data Transfers

The service providers listed above may process and store data in countries other than your own, including the United States. Where required, transfers are protected by appropriate safeguards such as standard contractual clauses or equivalent mechanisms offered by our providers.

9. Security

We use industry-standard measures to protect your data, including encrypted connections (TLS), secure server-managed authentication sessions, and access controls limiting who can view personal data. No method of transmission or storage is completely secure, but we work continuously to protect your information.

10. Children

The Service is not directed at children and may not be used by anyone under 18 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us at michal@bloxena.com and we will delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will provide notice through the Service or by email before the changes take effect. The "Last updated" date at the top of this page shows when this policy was last revised.

12. Contact

For any privacy question or request, contact us at michal@bloxena.com. You can also review our Terms of Service and Refund & Cancellation Policy.