PRIVACY POLICY

1.1 Account Information. When you register via Google OAuth, we receive your name, email address, and profile picture from Google. We store this data to create and maintain your account.

1.2 Usage Data. We automatically collect information about how you interact with the Service, including:

• ›Messages sent to AI agents (stored to maintain conversation history)
• ›Token usage and transaction records
• ›IP address, browser type, and device information
• ›Pages visited and features used within the platform
• ›Timestamps of actions

1.3 Payment Information. Payment processing is handled entirely by Stripe. We do not store credit card numbers or full payment details. We receive and store transaction records, including purchase amounts and token package details.

1.4 Crypto Exchange Credentials. If you choose to link a crypto exchange, we store your exchange name, wallet address, API key, and API secret in encrypted form. These are used solely to enable the Trading Bot AI agent. We recommend using read-only API keys.

We use the information we collect to:

• ›Provide, operate, and maintain the Balanza Report platform
• ›Process token purchases and maintain your token balance
• ›Enable AI agent functionality including trading analysis, email assistance, and research
• ›Authenticate your identity via Google OAuth sessions
• ›Send service-related notifications (low token balance, security alerts)
• ›Monitor and analyze usage patterns to improve the Service
• ›Detect, prevent, and address technical issues and fraudulent activity
• ›Comply with legal obligations

We do not sell your personal information to third parties. We do not use your data for advertising purposes.

We share your information only in the following circumstances:

3.1 Service Providers. We work with trusted third-party service providers:

• ›Stripe — payment processing (subject to Stripe's Privacy Policy)
• ›Google — OAuth authentication (subject to Google's Privacy Policy)
• ›Google Gemini AI — AI response generation (message content is processed by Google's AI services)
• ›Turso/libSQL — encrypted database hosting
• ›Binance — real-time market data (public API, no personal data shared)

3.2 Legal Requirements. We may disclose your information if required by law, court order, or governmental authority.

3.3 Business Transfers. In the event of a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your data is transferred and becomes subject to a different privacy policy.

3.4 With Your Consent. We may share your information for any other purpose with your explicit consent.

When you send messages to our AI agents, your message content is transmitted to Google's Gemini AI API for processing. This means:

• ›Message content leaves our servers and is processed by Google's infrastructure
• ›Google's data use policies apply to AI processing (see Google's API Terms of Service)
• ›We store your conversation history on our servers to maintain chat continuity
• ›You can delete conversations at any time from your account settings
• ›Do not share sensitive personal data (passwords, government IDs, full financial account numbers) in AI chats

Crypto API keys stored for the Trading Bot are never sent to AI models. They are used only for direct exchange API calls.

We implement industry-standard security measures to protect your information:

• ›All data in transit is encrypted using TLS/SSL
• ›Sensitive credentials (crypto API keys) are encrypted at rest
• ›Session tokens are stored as httpOnly cookies, inaccessible to JavaScript
• ›Database access is restricted and authenticated
• ›Regular security assessments of our infrastructure

No method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security.

• ›Account data: Retained while your account is active. Deleted within 30 days of account deletion request.
• ›Conversation history: Retained indefinitely unless manually deleted by you.
• ›Payment records: Retained for 7 years as required by tax and financial regulations.
• ›Session tokens: Expire after 30 days of inactivity.
• ›Logs and analytics: Aggregated or deleted after 12 months.

You have the following rights regarding your personal data:

• ›Access: Request a copy of the data we hold about you
• ›Correction: Request correction of inaccurate data
• ›Deletion: Request deletion of your account and associated data
• ›Portability: Request your conversation history and data in a portable format
• ›Restriction: Request we restrict processing of your data
• ›Objection: Object to certain processing activities

GDPR (EEA/UK users): You have additional rights under the General Data Protection Regulation. Our legal basis for processing is contract performance (providing the Service) and legitimate interests.

CCPA (California users): You have the right to know what personal information is collected and to request deletion. We do not sell personal information.

To exercise any of these rights, contact us at balanza@googlegroups.com.

We use minimal cookies:

• ›balanza_session — httpOnly session cookie for authentication (required, 30-day expiry)
• ›No advertising or tracking cookies
• ›No third-party analytics cookies

The session cookie is strictly necessary to operate the Service and cannot be disabled without logging out.

Our Service may contain links to third-party websites (e.g. crypto exchanges). We are not responsible for the privacy practices of those sites. We encourage you to review their privacy policies before providing any information.

Balanza Report is not directed to children under 18 years of age. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at balanza@googlegroups.com.

We may update this Privacy Policy periodically. We will notify you of significant changes by:

• ›Posting the new policy on this page with an updated date
• ›Sending an email notification to your registered address for material changes
• ›Displaying a notice within the platform

Continued use of the Service after changes constitutes acceptance of the updated policy.

For privacy-related questions, data requests, or to report a concern: