Privacy Policy - Octopus Tracker

1. Who We Are

We are a Norway-based digital service offering tools to help users monitor and visualize their cryptocurrency holdings. If you have questions about this Privacy Policy, contact us at: [email protected]

2. What Data We Collect

a) Account Information

Email address
Authentication provider (email/password or Google)
Subscription plan and billing history (via Stripe)

b) Portfolio Data

Wallet addresses manually added by you
Exchange account connections via read-only API keys
Any custom asset data or manual entries you choose to store

Note: API keys are not stored in a way that allows us to perform trading or withdrawals.

c) Usage Data (via Posthog Analytics)

Device type, browser version, pages visited, clicks, and feature usage
IP address (for geolocation and security)
Session duration

d) Communication

We may store emails you send us, or your replies to feature announcements and updates.

3. How We Use Your Data

We use your data to:

Provide and maintain the Octopus Tracker platform
Display and update your crypto portfolio data
Improve features based on anonymized analytics
Communicate relevant updates about the service
Process and manage subscriptions through Stripe

We do not sell your personal data or share it for marketing purposes.

4. Legal Basis for Processing (GDPR)

We process your personal data based on:

Contractual necessity: to provide the service you signed up for
Legitimate interest: improving our platform, securing accounts, communicating essential updates
Consent: for optional communications and analytics tracking (via cookie banner)

5. How We Store and Secure Your Data

We use secure servers and industry best practices to store your data. Passwords are hashed and API keys are stored securely with limited access.

Your data may be stored or processed on infrastructure provided by trusted vendors (e.g., Posthog, Stripe), all of whom are GDPR-compliant.

6. Sharing with Third Parties

We share necessary data with:

Stripe: for secure payment processing
Posthog: for anonymous analytics (self-hosted or EU servers)
Email provider (e.g., Migadu, Gmail): for sending support and update emails

We never sell your data or share it with advertisers.

7. Your Rights (Under GDPR)

As a user, you have the right to:

Access the data we hold about you
Correct inaccurate information
Delete your account and associated data
Withdraw consent to processing where applicable
Port your data to another provider
Lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet)

To exercise your rights, contact us at: [email protected]

8. Cookies and Analytics

We use cookies and similar technologies to:

Keep you logged in
Measure usage and improve our platform (via Posthog)

You can manage cookie preferences through your browser or opt out of analytics tracking via the cookie banner.

9. Data Retention

We retain user data for as long as your account is active. If you delete your account, your personal data will be removed within 30 days, except where required by law (e.g., invoicing records).

10. Changes to This Policy

We may update this Privacy Policy when necessary. We will notify users of any significant changes via email or in-app notification.

11. Contact

If you have any questions about this policy or your data, reach us at: [email protected]