Go to content
HalalCryptoAbout

Privacy

Small launch data footprint.

This page explains how the HalalCrypto launch surface handles messages, visits, and other light-touch operational data.

Information we collect

When you sign up, we collect your email address, country, name, IP address, browser fingerprint (hashed — not stored in plaintext), and tier preference. If you connect an exchange API key, we hold an AES-256-GCM encrypted copy of that key — the plaintext key is never stored. If you contact us by email, we receive the information you choose to send. We also see standard server logs and site usage signals.

How we use it

We use your information to operate your subscription, run your bot, send account and billing notifications, and respond to support inquiries. We do not sell personal information and do not use it for advertising.

Sub-processors — third parties that handle your data

We use the following sub-processors to operate the service. Each processes only the data necessary for its function: Supabase (database and authentication hosting — US); Cloudflare (CDN, edge hosting, DDoS protection — US/EU); DodoPayments (card payment processing — EU/US); NowPayments (crypto payment processing — Estonia); Resend (transactional email delivery — US). Data transfers outside the Kingdom of Saudi Arabia rely on standard contractual clauses or equivalent safeguards. Sub-processor list updated: 2026-04-28.

Operator disclosure

Operating entity: the registered operator of HalalCrypto (Sole Establishment under a Saudi Freelance License — application filed 2026-04-19, CR pending issuance). Jurisdiction: Kingdom of Saudi Arabia. Data controller: HalalCrypto's authorized representative within the operating entity. The full legal name and CR number are disclosed on request via [email protected] and to regulatory authorities (including SDAIA) without delay. Operational contact: [email protected]. Last updated: 2026-04-28.

Your rights

You may request access to, correction of, or erasure of your personal data at any time by emailing [email protected]. We will respond within 30 days. Account deletion removes all personal data from our systems; encrypted API key blobs are also deleted — your exchange account itself is unaffected.

PDPL complaint channel

Under Saudi Arabia's Personal Data Protection Law (PDPL), you may file a complaint with the Saudi Data and AI Authority (SDAIA) at https://sdaia.gov.sa/en/PDPL/Pages/PDPLcomplaint.aspx if you believe your personal data has been mishandled by this service.

Your choices

You can contact us directly, request updates to your information, or ask us to stop using your contact details for future launch communication. Before paid access opens, this page will also list the formal controller and complaint channel.

[email protected]