Privacy Policy

BTC Strategy Dashboard ("we", "our", "us") is operated by Michael Gabriele, a sole proprietor based in Lausanne, Switzerland. We are the data controller for the personal data processed through the service available at btcstrategy.app.

For any privacy-related questions or to exercise your rights, contact us at michgabriele@gmail.com.

We only collect data necessary to operate the service:

• Account information: email address, language preference, country (collected during signup via Firebase Authentication).
• Service settings: your DCA configuration (base amount, currency, goal, exit plan, scenarios), and transaction logs you choose to record.
• Subscription data: plan type (free, trial, premium), trial end date, subscription status, and a reference to your Stripe customer ID. Payment card data is handled exclusively by Stripe and never stored or seen by us.
• Technical data: minimum logs strictly necessary to deliver the service (e.g., authentication tokens). We do not run analytics or advertising trackers.

• Service delivery — to provide your account, save your settings, and run the dashboard (legal basis: contract, GDPR Art. 6(1)(b) / nLPD Art. 31).
• Payment processing — to process subscriptions through Stripe (legal basis: contract).
• Customer support — to respond to your inquiries (legal basis: legitimate interest, GDPR Art. 6(1)(f)).
• Legal compliance — for accounting and tax obligations (legal basis: legal obligation).

We rely on a small set of trusted providers to deliver the service. Each acts as a data processor on our behalf:

• Google Firebase — authentication and database (Firestore region: europe-west6, Zurich, Switzerland).
• Stripe Inc. — payment processing and subscription management. Stripe is the controller of your payment data; see Stripe's Privacy Policy.
• Vercel Inc. — application hosting and content delivery.
• Kraken & blockchain.info — public BTC market data providers; we only fetch public price data and do not send user data to them.

We do not sell your personal data to third parties.

Some of our processors are based outside Switzerland and the EU/EEA (e.g., Stripe in the United States). When such transfers occur, they rely on adequacy decisions or Standard Contractual Clauses to safeguard your data.

We retain your account data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except for billing records we are legally required to keep for up to 10 years (Swiss accounting law).

Under GDPR and the Swiss nLPD, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data ("right to be forgotten"), subject to legal retention duties.
• Receive your data in a portable format.
• Object to processing based on legitimate interest.
• Withdraw consent at any time, where consent is the legal basis.

To exercise any of these rights, email michgabriele@gmail.com. We will respond within 30 days.

You also have the right to lodge a complaint with your data protection authority — in Switzerland, the FDPIC.

We use only the strictly necessary cookies required to keep you signed in (Firebase Authentication session). We do not use advertising or analytics cookies. Stripe may set its own cookies during checkout to prevent fraud — see Stripe's privacy notice.

We take reasonable technical and organizational measures to protect your data, including encryption in transit (HTTPS), encryption at rest via our processors, and least-privilege access. No method of transmission is 100% secure, but we strive to use industry-standard protections.

We may update this Privacy Policy from time to time. Material changes will be communicated by email or through a notice on the service. The "Last updated" date at the top reflects the latest revision.

Michael Gabriele
Lausanne, Switzerland
Email: michgabriele@gmail.com