1. Introduction

Satoshi Data Labs LLC ("Company", "we", "us", or "our"), a limited liability company registered in the State of California, USA, operates Satoshi Chat (the "Service"). This Privacy Policy describes how we collect, use, store, and protect your personal information when you use the Service.

The Service is intended for users aged 18 and older. We do not knowingly collect personal data from anyone under 18 years of age. If we learn that we have collected data from a person under 18, we will promptly delete it.

2. Information We Collect

Account Information

When you sign in via Google OAuth, we receive and store:

• Email address
• Display name
• Profile picture URL

Usage Data

When you use the Service, we collect:

• Conversations and messages you submit
• Tasks and alerts you create
• Device identifiers for session management
• Timestamps of your interactions

Automatically Collected Information

We use session cookies (not tracking cookies) to maintain your login state. We do not use analytics cookies, advertising trackers, or cross-site tracking technologies.

3. How We Use Your Information

We use your information to:

• Provide and maintain the Service
• Authenticate your identity and manage your account
• Process your queries and generate AI-powered responses
• Deliver notifications and alerts you configure (e.g., via Telegram)
• Improve the Service and fix issues

4. Data Storage

Your data is stored on Google Cloud SQL (PostgreSQL) in the United States region. Conversation data, user profiles, and task configurations are stored in our managed database. Pre-computed market analysis files are stored in Google Cloud Storage.

5. Third-Party Services

The Service integrates with the following third-party providers:

• Google OAuth — for authentication
• Google Cloud Platform — for hosting, database, and storage
• OpenRouter / Google AI — for AI model inference (your queries are sent to these providers to generate responses)
• Coinglass — for market data (no user data is shared)
• Telegram — for notification delivery (only if you opt in and configure a channel)

Each third-party service has its own privacy policy. We encourage you to review them.

6. Data Sharing and Selling

We do not sell your personal information. We do not share your data with third parties for marketing purposes. We may share data only as required by law, to protect our rights, or with service providers who assist in operating the Service (subject to confidentiality obligations).

7. Data Retention

We retain your account information and conversation history for as long as your account is active. You can clear your data (conversations, tasks, alerts, and shared links) at any time via the Settings page while keeping your account active. You can also permanently delete your account and all associated data via the Settings page.

Upon account deletion, all personal data is permanently removed from our systems. Market data and aggregated, non-identifiable analytics may be retained indefinitely. We may retain certain information as required by law or for legitimate business purposes (e.g., fraud prevention).

8. Cookies

We categorize cookies as follows:

Essential Cookies

These cookies are strictly necessary for the Service to function. They cannot be disabled while using the Service.

• Session cookie — maintains your authenticated login state

Optional Cookies

We currently do not use any optional cookies (analytics, advertising, or tracking). If we introduce optional cookies in the future, we will update this policy and request your explicit consent via our cookie consent banner before setting them.

When you first visit the Service, a cookie consent banner informs you of our cookie usage. You can manage your cookie preferences at any time. For more details, see our full cookie disclosure above.

9. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict processing of your data
• Request data portability

To exercise these rights, contact us at the email below.

10. California Consumer Privacy Act (CCPA)

If you are a California resident, you have the following rights under the CCPA:

• Right to Know — You may request disclosure of the categories and specific pieces of personal information we have collected about you. We collect: email address, display name, profile picture URL, conversations, tasks, and device identifiers.
• Right to Delete — You may request deletion of your personal information. You can do this directly via the Settings page (Delete Account), or by contacting us at the email below.
• Right to Opt-Out of Sale — We do not sell your personal information to third parties.
• Right to Non-Discrimination — We will not discriminate against you for exercising any of your CCPA rights.

To exercise these rights, use the Settings page or contact us at privacy@satoshichat.com. We will respond to verifiable consumer requests within 45 days.

"Shine the Light" (Cal. Civ. Code § 1798.83): We do not share personal information with third parties for their direct marketing purposes.

11. European Economic Area (GDPR)

If you are located in the European Economic Area (EEA), the following additional provisions apply:

Legal Basis for Processing

We process your personal data on the following legal bases:

• Consent — By accepting our Terms of Service, you consent to the processing of your data as described in this policy.
• Legitimate Interest — We process data as necessary for the operation and improvement of the Service, fraud prevention, and security.
• Contract Performance — Processing necessary to provide you with the Service you requested.

Your Rights Under GDPR

You have the right to:

• Access — Request a copy of the personal data we hold about you
• Rectification — Request correction of inaccurate personal data
• Erasure — Request deletion of your personal data (via Settings > Delete Account or by contacting us)
• Restriction — Request restriction of processing of your personal data
• Portability — Request transfer of your data in a structured, machine-readable format
• Objection — Object to processing based on legitimate interest

International Data Transfers

Your data is stored and processed in the United States. By using the Service, you consent to the transfer of your data to the US. We rely on Standard Contractual Clauses (SCCs) as the legal mechanism for data transfers from the EEA to the US.

Data Protection Officer

For GDPR-related inquiries, contact our Data Protection Officer at: dpo@satoshichat.com

Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority in the EU member state of your habitual residence, place of work, or place of the alleged infringement.

Cookie Consent

We display a cookie consent banner when you first visit the Service. Only essential cookies (required for authentication) are set without consent. If we introduce optional cookies in the future, they will require your explicit opt-in consent.

12. Security

We implement reasonable security measures to protect your data, including encrypted connections (TLS), secure authentication (JWT tokens), and access controls on our infrastructure. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated through the Service. Your continued use after changes constitutes acceptance of the updated policy.

14. Contact

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at:

Satoshi Data Labs LLC
Email: privacy@satoshichat.com