Privacy Policy

This policy describes how Alphabit (operated by Sahil Kaila, a sole proprietor based in Massachusetts — "we", "us") handles your information when you use alphabit tools and services (the "Service"). The short version: we collect very little, we don't sell any of it, and the most sensitive things — your crypto, your exchange accounts, your keys — we never touch at all.

1. What we collect

• Email address. Collected only if you create an account (via magic-link sign-in) or join a waitlist. Used for authentication, service messages, and — only if you opt in — a weekly digest.
• Portfolio holdings.If you sign in and use the Portfolio Tracker, the coin, amount, and average cost figures you enter are stored against your account. If you use the tool without signing in, this data stays in your browser's local storage and never reaches our servers.
• Subscription status. If you purchase a paid plan, we store your plan tier and billing status. Payment card details are handled entirely by Stripe and never pass through our servers.
• Basic technical logs. Standard hosting logs (IP address, request path, user agent) retained briefly by our hosting provider (Vercel) for security and debugging.

2. What we do not collect

• No passwords — authentication is passwordless (email one-time links).
• No exchange API keys, wallet addresses, private keys, or custody of any assets.
• No sale or rental of personal data to third parties, ever.
• No third-party advertising trackers.

3. How we use your information

We use the information above to operate the Service: signing you in, syncing your portfolio if you choose to, processing subscriptions, sending emails you asked for, and keeping the Service secure. We do not use your data to train models, build advertising profiles, or for any purpose unrelated to the Service.

4. Who we share it with

We share data only with the processors needed to run the Service:

• Supabase — authentication and database hosting.
• Vercel — website hosting, logs, and cookieless traffic analytics (page views, referrers — no personal data sold or shared with advertisers).
• Stripe — payment processing (when billing is live).

We may disclose information if legally required to do so. There are no other recipients.

5. Data retention and deletion

Account data is kept while your account is active. You can request deletion of your account and all associated data at any time by contacting us, and we will complete it within 30 days. Anonymous localStorage data is under your control — clearing your browser storage removes it.

6. Your rights

Depending on your jurisdiction, you may have rights to access, correct, export, or delete your personal data, and to object to processing. To exercise any of these, contact us at support@alphabitlab.com. We honor these requests regardless of jurisdiction where practical.

7. Changes to this policy

If this policy changes materially, we will update the date above and note the change prominently. We won't weaken protections retroactively without notice.

See also: Security · Terms of Service · Disclosure