Privacy Policy

AssetFeed is operated by Individual Entrepreneur Mykola Vysotskyi, also known as Nikolai Vysotskyi, registered in Georgia (Sakartvelo) by the LEPL National Agency of Public Registry, at 52 Mikheil Tsinamdzgvrishvili Street, Chugureti District, Tbilisi, Georgia. That is the data controller for the personal data described below.

Here's what we collect, why we collect it, and what control you have over it — written to be actually readable.

1. Introduction

This Privacy Policy describes how AssetFeed ("we", "us", "our") collects, uses, and protects your personal information when you use our market data and analytics service, covering crypto and other asset classes.

2. Information We Collect

2.1 Personal Information

We collect the following personal information:

Account Information:

• Full name
• Email address
• Password (encrypted)
• Profile photo (optional)
• Date of account creation

Authentication Data:

• Google OAuth information (if you choose to sign in with Google)
• Login timestamps and IP addresses
• Device information and browser details

Financial Information:

• Asset holdings and portfolio data across crypto and other asset classes (if you choose to share)
• Watchlist preferences
• Transaction history on our platform
• Payment information for premium subscriptions

2.2 Usage Information

We automatically collect information about how you use our service:

Platform Activity:

• Pages visited and time spent on our platform
• Features used and interactions with content
• Search queries and filter preferences
• Opinions and comments you post

Technical Information:

• IP address and geographical location
• Device type, operating system, and browser information
• Cookies and similar tracking technologies
• Performance and error logs

2.3 Third-Party Information

We may receive information from third parties:

Market Data Providers:

• Prices and market data across asset classes
• Historical trading information
• Market analysis and insights

Social Media:

• Public profile information if you connect social media accounts
• Shared content and interactions

3. How We Use Your Information

3.1 Service Provision

• Maintain and operate our platform
• Show market data and analytics for the assets you choose to follow
• Process your account registration and authentication
• Enable premium features for paid subscribers
• Sync your portfolio and watchlist across devices

3.2 Communication

• Send service-related notifications and updates
• Provide customer support and respond to inquiries
• Send premium launch announcements and feature updates
• Deliver marketing communications (with your consent)

3.3 Improvement and Analytics

• Analyze usage patterns to improve our platform
• Develop new features and services
• Conduct research and analytics on market trends across asset classes
• Personalize your experience based on preferences

3.4 Legal and Security

• Comply with legal obligations and regulations
• Protect against fraud, abuse, and security threats
• Enforce our Terms of Service
• Respond to legal requests and court orders

3.5 Our Legal Basis for Processing

Where the GDPR or a comparable law applies to you, we rely on the following legal bases:

What we do	Legal basis
Run your account, deliver the service, take payment	Performance of a contract (Art. 6(1)(b))
Keep the service secure, prevent fraud and abuse, understand how the product is used so we can improve it	Legitimate interests (Art. 6(1)(f))
Send marketing email, set non-essential cookies	Your consent (Art. 6(1)(a)), which you can withdraw at any time
Keep records we are required to keep, respond to lawful requests	Legal obligation (Art. 6(1)(c))

Where we rely on legitimate interests, we have considered your rights and interests and use the least intrusive option that still achieves the purpose. You can object to that processing — see section 6.

4. Information Sharing and Disclosure

4.1 We Do Not Sell Personal Information

We do not sell, rent, or trade your personal information to third parties for commercial purposes.

4.2 Authorized Sharing

We may share your information in the following circumstances:

Service Providers:

• Payment processors for subscription billing
• Cloud hosting providers for data storage
• Analytics services for platform improvement
• Customer support tools and services

Legal Requirements:

• When required by law, regulation, or court order
• To protect our rights, property, or safety
• To prevent fraud or security threats
• In connection with legal proceedings

Business Transfers:

• In case of merger, acquisition, or sale of assets
• During bankruptcy or similar proceedings
• With your consent or as permitted by law

4.3 Aggregated and Anonymized Data

We may share aggregated, anonymized data that cannot identify you:

• Market trends and insights across asset classes
• Platform usage statistics
• Research and educational content

5. Data Security

5.1 Security Measures

AssetFeed is run by one person, so we describe the measures we actually have rather than the ones a larger company would list:

Technical Safeguards:

• Encryption of data in transit and at rest
• Secure authentication and access controls
• Dependency and platform security updates applied as they are released
• Monitoring and logging of access to production systems

Organizational Measures:

• Access to personal information is limited to the operator and the infrastructure providers listed in section 4
• Production credentials are stored in a password manager, not shared in plain text
• Security incidents are handled directly by the operator

We do not claim independent security certification, external audits, or a dedicated security team — see section 12.1.

5.2 Data Retention

• We retain your personal information only as long as necessary for the purposes outlined in this policy
• Account information is retained while your account is active
• After account deletion, we may retain certain information for legal compliance
• You can request deletion of your personal information at any time

6. Your Rights and Choices

6.1 Access and Control

You have the following rights regarding your personal information:

Account Management:

• Access and review your personal information
• Update or correct inaccurate information
• Delete your account and associated data
• Export your data in a portable format

Privacy Controls:

• Opt out of marketing communications
• Manage cookie preferences
• Control data sharing with third parties
• Request restriction of processing

6.2 Data Subject Rights (GDPR)

If you are in the European Union, you have additional rights:

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent

6.3 California Privacy Rights (CCPA)

If you are a California resident, you have the right to:

• Know what personal information we collect
• Request deletion of your personal information
• Opt out of the sale of personal information (we do not sell)
• Non-discrimination for exercising your rights

7. Cookies and Tracking Technologies

7.1 What Are Cookies

Cookies are small text files that are placed on your device when you visit our website. They help us provide you with a better experience by remembering your preferences and understanding how you use our platform.

7.2 Types of Cookies We Use

Essential Cookies (Always Active):

• Session management and authentication
• Security and fraud prevention
• Basic website functionality
• Load balancing and performance optimization
• Cannot be disabled as they are necessary for the website to function

Analytics Cookies (Optional):

• Google Analytics (GA4) - Traffic analysis and user behavior
• Performance monitoring and error tracking
• Feature usage statistics
• Help us improve our platform and user experience
• Data is anonymized and aggregated

Marketing Cookies (Optional):

• Advertising personalization and targeting
• Social media integration
• Conversion tracking for marketing campaigns
• Remarketing and audience segmentation
• Only used with your explicit consent

7.3 Third-Party Services

We use the following third-party services that may set cookies:

Google Analytics (GA4):

• Purpose: Website analytics and performance monitoring
• Data collected: Page views, user interactions, demographic data
• Privacy policy: https://policies.google.com/privacy
• Opt-out: https://tools.google.com/dlpage/gaoptout

Google Ads (if applicable):

• Purpose: Advertising and conversion tracking
• Data collected: Ad interactions, conversion data
• Privacy policy: https://policies.google.com/privacy
• Opt-out: https://adssettings.google.com/

7.4 Cookie Consent and Management

We obtain your consent before placing non-essential cookies. You can manage your cookie preferences through:

Our Cookie Consent Banner:

• Displayed on your first visit
• Allows you to accept all, reject all, or customize preferences
• Can be accessed again through our cookie settings

Browser Settings:

• All major browsers allow you to block or delete cookies
• Note: Disabling essential cookies may affect website functionality

Third-Party Opt-Out Tools:

• Google Analytics opt-out browser add-on
• Network Advertising Initiative opt-out page
• Digital Advertising Alliance opt-out page

7.5 Cookie Retention

• Essential cookies: Deleted when you close your browser (session cookies) or after 1 year (persistent cookies)
• Analytics cookies: Retained for up to 26 months
• Marketing cookies: Retained for up to 13 months
• You can delete cookies at any time through your browser settings

7.6 International Transfers

Some third-party services may transfer your data internationally. We ensure appropriate safeguards are in place, including:

• Standard contractual clauses where applicable
• The EU-US Data Privacy Framework, where the provider is certified under it
• Your consent for data transfers when required

8. International Data Transfers

8.1 Global Operations

We may transfer your information to countries outside your residence for:

• Cloud hosting and data storage
• Customer support services
• Analytics and platform improvement

8.2 Safeguards

We ensure appropriate safeguards for international transfers:

• Adequacy decisions by regulatory authorities
• Standard contractual clauses
• The EU-US Data Privacy Framework, where the provider is certified under it
• Your explicit consent when required

9. Children's Privacy

9.1 Age Restrictions

• Our service is not intended for children under 18
• We do not knowingly collect information from children under 18
• If we discover we have collected information from a child, we will delete it immediately

9.2 Parental Guidance

• Parents should monitor their children's online activities
• Contact us if you believe a child has provided personal information

10. Changes to This Privacy Policy

10.1 Policy Updates

• We may update this Privacy Policy periodically
• Changes will be posted on our platform with the effective date
• Material changes will be communicated via email or platform notification
• Continued use of our service constitutes acceptance of changes

10.2 Notification

We will notify you of significant changes:

• 30 days before the effective date of material changes
• Through email to your registered address
• Via prominent notice on our platform

11. Contact Information

For any questions about this Privacy Policy or your personal data — including GDPR or other data-protection requests — email [email protected], or write to Individual Entrepreneur Mykola Vysotskyi, 52 Mikheil Tsinamdzgvrishvili Street, Chugureti District, Tbilisi, Georgia. AssetFeed is run by its operator personally: there is no separate privacy office or Data Protection Officer, and your request is handled directly by the person responsible for the data.

12. Regulatory Compliance

12.1 Applicable Laws

We aim to honor the data-protection rights granted by the laws that may apply to you, including the EU General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and the Law of Georgia on Personal Data Protection, to the extent it applies to us as an operator registered in Georgia (Sakartvelo). AssetFeed is operated by an individual entrepreneur and has not been independently audited or certified against these frameworks — if you believe we fall short of them anywhere, tell us at [email protected] and we will fix it.

12.2 Regulatory Authority

You may file a complaint with your local data protection authority if you believe we have violated your privacy rights. You may also complain to the competent data protection supervisory authority in Georgia (Sakartvelo), where the operator is registered.

13. Effective Date

This Privacy Policy is effective as of July 2026 and applies to all information collected on or after this date.