Privacy Policy

1. Introduction

TargetHit ("we", "us", or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website (targethit.ai) and services. Please read this policy carefully. By using TargetHit, you consent to the data practices described in this policy.

2. Information We Collect

2.1 Information You Provide

• Account Information: Email address, name, and password when you create an account
• Profile Information: Telegram username, Discord ID, and notification preferences
• Payment Information: Billing details processed securely through Stripe (we do not store credit card numbers)
• Exchange API Keys: Encrypted API credentials for auto-trading (stored with AES-256-GCM encryption)
• Communications: Support requests, feedback, and correspondence with us

2.2 Information Collected Automatically

• Usage Data: Pages visited, features used, signals viewed, and interaction patterns
• Device Information: IP address, browser type, operating system, and device identifiers
• Cookies and Tracking: Session cookies, analytics cookies, and similar technologies (see our Cookie Policy)
• Log Data: Server logs including access times, pages viewed, and referring URLs

2.3 Information from Third Parties

• OAuth Providers: Basic profile information from Google, Discord, or Telegram when you use social login
• Payment Processor: Transaction status and subscription information from Stripe

3. How We Use Your Information

We use your information for the following purposes:

• Service Delivery: To provide trading signals, notifications, and auto-trading services
• Account Management: To create and manage your account, process payments, and handle subscriptions
• Communication: To send trading alerts, service updates, and respond to your inquiries
• Improvement: To analyze usage patterns and improve our platform and services
• Security: To protect against fraud, unauthorized access, and other security threats
• Legal Compliance: To comply with applicable laws and regulations
• Marketing: To send promotional content (with your consent, which you can withdraw at any time)

4. Legal Basis for Processing (GDPR)

If you are in the European Economic Area (EEA), we process your data based on:

• Contract Performance: Processing necessary to provide our services to you
• Legitimate Interests: For fraud prevention, security, and service improvement
• Consent: For marketing communications and non-essential cookies
• Legal Obligation: To comply with applicable laws

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your data with:

• Service Providers: Third parties who help us operate our services (e.g., Stripe for payments, cloud hosting providers)
• Cryptocurrency Exchanges: Your encrypted API credentials are sent to exchanges you've authorized for auto-trading
• Legal Requirements: When required by law, court order, or governmental authority
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• With Your Consent: For any other purpose with your explicit consent

6. Data Security

We implement robust security measures to protect your data:

• Encryption: All data is encrypted in transit (TLS/SSL) and at rest
• API Key Security: Exchange API keys are encrypted using AES-256-GCM before storage
• Access Controls: Strict access controls and authentication mechanisms
• Regular Audits: Periodic security assessments and monitoring
• Secure Infrastructure: Hosted on secure cloud infrastructure with redundancy

While we take extensive measures to protect your data, no system is 100% secure. We cannot guarantee absolute security of your information.

7. Data Retention

We retain your personal data only as long as necessary for the purposes outlined in this policy. Account data is retained while your account is active and for up to 5 years after account deletion for legal and tax compliance. Trading history and signals are retained for performance tracking and audit purposes. You may request deletion of your data at any time, subject to legal retention requirements.

8. Your Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your data ("right to be forgotten")
• Portability: Request your data in a portable format
• Restriction: Request restriction of processing
• Objection: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw consent where processing is based on consent

To exercise these rights, contact us at privacy@targethit.ai.

9. California Privacy Rights (CCPA)

California residents have additional rights under the CCPA:

• Right to know what personal information we collect, use, and disclose
• Right to request deletion of your personal information
• Right to opt-out of the sale of personal information (we do not sell personal data)
• Right to non-discrimination for exercising your privacy rights

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. When we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the European Commission.

11. Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child without parental consent, we will take steps to delete that information.

12. Third-Party Links

Our platform may contain links to third-party websites and services, including cryptocurrency exchanges. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal information.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. We may also notify you via email for significant changes. Your continued use of our services after changes indicates your acceptance of the updated policy.

14. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us: