Privacy Policy

EXCAVO ("we", "us", "our") respects your privacy and is committed to protecting the personal data you share with us. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website excavo.com and use our services ("Platform").

By using the Platform, you consent to the data practices described in this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access or use the Platform.

This Privacy Policy applies to all users of the Platform, including visitors, registered users, and subscribers. We encourage you to read this policy carefully and contact us if you have any questions.

We use the information we collect for the following purposes: (a) to create and manage your account; (b) to process subscriptions and verify payments; (c) to grant and manage TradingView indicator access based on your provided TradingView username; (d) to send email notifications essential to the operation of the service, including: account-related emails (email verification, password reset, security alerts), subscription and payment emails (payment confirmations, subscription activation, expiration reminders, access status changes), and platform announcements (new indicator releases, service updates, important notices); (e) to provide customer support and respond to your inquiries; (f) to maintain the security and integrity of the Platform; (g) to detect and prevent fraud, abuse, and unauthorized access; (h) to improve the Platform and develop new features based on aggregate usage data; (i) to comply with legal obligations and enforce our Terms of Service.

Email notifications listed in point (d) above are delivered via our email service provider (Resend) using your registered email address. These communications are integral to the service and cannot be individually opted out of while maintaining an active account. We do not use your email address for third-party marketing or unsolicited promotional content.

We do NOT use your personal information for: marketing purposes without your explicit consent, selling or renting to third parties, automated decision-making or profiling that produces legal effects, or any purpose not disclosed in this Privacy Policy.

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, we process your personal data under the following legal bases: (a) Contractual necessity — processing required to provide you with our services (account management, indicator access, subscription processing); (b) Legitimate interests — processing necessary for our legitimate business interests (security, fraud prevention, Platform improvement), provided these interests do not override your rights; (c) Legal obligation — processing required to comply with applicable laws and regulations; (d) Consent — where you have given specific consent for a particular processing activity (e.g., marketing communications). You may withdraw consent at any time.

We do not sell, trade, rent, or otherwise transfer your personal information to third parties for their marketing purposes. We may share your information only in the following limited circumstances:

(a) Service Providers: We share data with trusted third-party services that assist in operating our Platform, strictly under confidentiality agreements and only for the purposes of providing their services. These include: Supabase (database hosting and management), Vercel (website hosting and deployment), Resend (transactional email delivery), and cryptocurrency payment processors (payment verification).

(b) Legal Requirements: We may disclose your information if required to do so by law, regulation, legal process, or governmental request, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others, investigate fraud, or respond to a government request.

(c) Business Transfers: In the event of a merger, acquisition, reorganization, or sale of assets, your personal data may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on the Platform of any change in ownership or uses of your personal information.

Your data is stored on secure servers managed by our hosting providers (Supabase for database, Vercel for application hosting). All data transmission between your browser and our servers is encrypted using TLS/SSL (HTTPS). Passwords are hashed using bcrypt with salt and are never stored in plain text.

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These include: encrypted data storage, access controls and authentication, regular security audits, automated threat detection, and secure development practices.

While we strive to use commercially acceptable means to protect your personal data, no method of transmission over the Internet or method of electronic storage is 100% secure. We cannot guarantee absolute security and are not responsible for the actions of third parties who may gain unauthorized access despite our security measures.

Your information may be transferred to and maintained on servers located outside your state, province, country, or other governmental jurisdiction where data protection laws may differ from those in your jurisdiction.

If you are located in the EEA, UK, or Switzerland and we transfer your personal data to countries outside these regions, we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission, or transfers to countries that the European Commission has determined provide an adequate level of data protection.

We retain your personal data for as long as necessary to fulfill the purposes for which it was collected and to comply with our legal obligations. Specifically: (a) Account data (name, email, TradingView username) is retained for as long as your account is active; (b) Payment records and transaction history are retained for the period required by applicable tax and accounting laws (typically 5-7 years); (c) Server logs and access data are retained for up to 90 days for security and debugging purposes; (d) Support correspondence is retained for up to 2 years after resolution.

Upon account deletion request, we will delete or anonymize your personal data within 30 days, except for data that we are legally required to retain. Payment records may be retained in anonymized form for accounting purposes.

The Platform is not intended for individuals under the age of 18 (or the age of legal majority in your jurisdiction, whichever is greater). We do not knowingly collect personal information from children. If you are a parent or guardian and believe that your child has provided us with personal data, please contact us immediately. If we become aware that we have collected personal data from a child without verification of parental consent, we will take steps to delete that information promptly.

The Platform may contain links to third-party websites and services, including TradingView, cryptocurrency exchanges, Telegram, and social media platforms. This Privacy Policy does not apply to those third-party services. We encourage you to read the privacy policies of every website and service you visit or use.

We are not responsible for the privacy practices, content, or data collection of third-party services. Your interactions with these services are governed by their own privacy policies and terms of service.

Some browsers have a "Do Not Track" (DNT) feature that signals to websites that the user does not want to have their online activity tracked. Since there is no uniform standard for interpreting DNT signals, the Platform does not currently respond to DNT browser signals. However, as noted above, we do not use advertising or cross-site tracking cookies.

In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will: (a) notify the relevant data protection authority within 72 hours of becoming aware of the breach (where required by law); (b) notify affected users without undue delay via email and/or a prominent notice on the Platform; (c) provide information about the nature of the breach, the data affected, and the measures taken to address it.

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will: (a) update the "Last Updated" date at the top of this page; (b) notify registered users via email; (c) display a prominent notice on the Platform. Your continued use of the Platform after any changes constitutes your acceptance of the updated Privacy Policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us through our official Telegram channel: https://t.me/excavo. For data protection requests (access, correction, deletion, portability), we aim to respond within 30 days as required by applicable data protection regulations.