Privacy Policy

At Indocrypto, we are committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you use our cryptocurrency platform and services. By using Indocrypto, you agree to the practices described in this policy.

1. Data Controller

2. Information We Collect

Personal Information

• Email address (required for account creation)
• Full name (first and last name)
• Authentication provider information (Google, Apple, or email)

Web3 Wallet Data

• Blockchain wallet addresses (public addresses only)
• Embedded wallet information (tied to your user account)
• Note: We never store private keys or seed phrases. Your wallet's private keys are encrypted and managed by secure third-party infrastructure.

Usage Data

• Favorite cryptocurrencies and watchlist preferences
• AI chat conversations (stored locally for guests, in our database for members up to 100 conversations)
• User preferences (currency, language, theme)

Technical Information

• IP address and approximate location
• Browser type and version
• Device information and operating system
• Usage analytics via Google Analytics (page views, interactions, session duration)

3. How We Use Your Information

• Account authentication and identity verification
• Portfolio tracking and cryptocurrency balance display
• AI-powered chat assistance for crypto-related questions
• Personalizing your experience (favorites, preferences, language)
• Analyzing usage patterns to improve our services
• Sending important updates and notifications via email
• Detecting and preventing fraud, abuse, and security threats

4. Third-Party Services

We use trusted third-party services to provide our platform. These services may process your data according to their own privacy policies:

• Authentication Services: Authentication and user management services for secure login and account management.
• Web3 Infrastructure: Web3 infrastructure providers for wallet creation, blockchain interactions, and cryptocurrency data.
• Blockchain Data: Blockchain data providers for fetching token balances, prices, and transaction information.
• Market Data: Cryptocurrency market data providers for real-time prices, charts, and market statistics.
• AI Services: AI service providers for chat assistance and answering crypto-related questions.
• Analytics: Analytics services for understanding user behavior and improving our platform.
• Email Delivery: Email delivery services for sending transactional emails and important notifications.

5. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience:

Essential Cookies

Required for authentication, security, and basic functionality. These cannot be disabled.

Analytics Cookies

Google Analytics cookies to understand how users interact with our platform and improve our services.

6. Data Storage and Security

• All data transmitted between your device and our servers is encrypted using HTTPS/TLS
• Data is stored securely on enterprise-grade cloud infrastructure with redundancy and backup systems
• Access to personal data is restricted to authorized personnel only
• We implement security monitoring and regular security audits

7. Data Retention

• Account data: Retained as long as your account is active
• AI chat history: Up to 100 conversations for members, stored in browser localStorage for guests
• Analytics data: Aggregated and anonymized after 26 months (Google Analytics default)
• Deleted data: Permanently removed within 30 days of account deletion request

8. Your Rights Under Indonesian Law (UU PDP)

Under Indonesia's Personal Data Protection Law (UU PDP No. 27 of 2022), you have the following rights:

• Right to Access: Request a copy of your personal data we hold
• Right to Correction: Request correction of inaccurate or incomplete data
• Right to Deletion: Request deletion of your personal data and account
• Right to Data Portability: Request your data in a machine-readable format
• Right to Object: Object to certain data processing activities
• Right to Withdraw Consent: Withdraw your consent for data processing at any time

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 14 business days as required by Indonesian law.

9. Children's Privacy

Indocrypto is not intended for users under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us immediately so we can delete it.

10. International Data Transfers

Your data may be processed by third-party service providers that operate globally. These services comply with international data protection standards and use appropriate safeguards to protect your data during transfer.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of significant changes by posting the updated policy on our website with a new "Last Updated" date. Your continued use of Indocrypto after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us: