Hummingbirdα1. What we collect and why
We collect as little as we can. You can browse without an account, in which case we do not know who you are.
- Account — email, verification status, Clerk user ID; with Google/X sign-in, the basic profile Clerk receives (name, avatar, email). Source: you / Clerk. Why: sign-in, identifying your account, service notices. Basis: contract / consent.
- Entitlement and orders — plan status, expiry, order ID, amount, currency, payment status (no card numbers or wallet keys). Source: Infini and us. Why: activating and verifying Pro, refunds, bookkeeping. Basis: contract, legal obligation.
- API — key name, key hash and last 6 characters, created/revoked times, call counts and rate-limit records. Source: us. Why: authentication, quotas, abuse prevention. Basis: contract, legitimate interest.
- Preferences — watchlist, alert rules, calculation inputs (amount, holding time, etc.). Source: you. Why: providing features. Basis: contract.
- Technical — IP address, browser/device info, request and error logs. Source: automatic. Why: security, debugging, abuse prevention. Basis: legitimate interest.
- Statistics — page-view counts for a few pages (no query strings or calculation amounts). Source: Vercel Web Analytics. Why: understanding which pages are used. Basis: legitimate interest.
We do not collect exchange accounts, exchange API keys, wallet private keys or seed phrases, ID documents, positions or trade history. Please do not send them to us. We do not sell personal data or build advertising profiles.
2. Your rights
You can: access and get a copy of your data; correct it; delete it (delete your account on the account page or email us); withdraw consent; object to processing based on legitimate interests; ask us to restrict processing; request portability; and complain to your local regulator. We make no automated decisions with legal effect on you — the AI judges market routes, not people. Email humarb.consent230@passinbox.com; we reply within 30 days.
4. Retention
Account data is kept until you delete your account and purged from the database within 30 days (backups roll over naturally). Order and payment records are kept for 5 years for bookkeeping. Technical logs are generally kept no longer than 30 days. Statistics are aggregated.
5. Children
The Service is only for people aged 18 or over. We do not knowingly collect data from minors and will delete it if we find it.
6. Security
We use HTTPS, least-privilege access, hashed API keys and server-side secrets. No system is perfectly secure and internet transmission is at your own risk. If a breach affects your data, we will notify you as the law requires.
8. Third-party sites and social media
The Service links to exchanges, X, Telegram and other third-party sites, which have their own privacy policies; we are not responsible for them. Posts in the Telegram group or on X are public.
9. Updates
We may update this policy and will show the effective date on this page; material changes are notified to registered users on the site or by email.
10. Contact
Privacy questions, rights requests or deletion: humarb.consent230@passinbox.com (operator: Leo). See also the Terms of Service.