Privacy Policy

This policy explains what personal data bitloar.store collects, why we collect it, and the choices you have. We keep the data we collect to the minimum needed to operate the Platform.

1. Data we collect

• Account data: email address and a bcrypt hash of your password. We never store your password in plain text.
• Activation and withdrawal data: the TXIDs, amounts, currency, network and receiving addresses you submit, plus admin review notes.
• Investment records: plans selected, amounts, durations and the daily accrual records generated for your account.
• Chat data: when you use the live chat widget, the widget provider may collect your email, device information and the content of the conversation.
• Technical data: standard server logs such as IP address, request path and timestamp, used for security and debugging.

2. How we use your data

• To create and secure your account, and to sign you in.
• To review activation payments and process investment withdrawals.
• To calculate and display daily returns and investment status.
• To provide customer support through live chat and email.
• To detect fraud, abuse and unauthorized access.
• To meet legal, accounting and regulatory obligations.

3. Legal bases

Where data protection law requires a legal basis, we rely on performance of our contract with you (operating your account), our legitimate interests (security, fraud prevention and service improvement), your consent (optional chat identification), and compliance with legal obligations.

4. Sharing

We do not sell your personal data. We share it only with:

• Our hosting and database providers, who process data on our instructions.
• The live chat provider used for the support widget.
• Blockchain explorers, to verify public on-chain transactions.
• Authorities, where required by law or to protect the Platform and its users.

5. Retention

Account and transaction records are kept for as long as your account is active and for the period afterwards required for accounting, fraud prevention and legal compliance. Chat transcripts are retained according to the chat provider's settings. You may request deletion of data we are not legally required to keep.

6. Security

Passwords are hashed with bcrypt, database connections use TLS, and administrative actions are restricted to admin accounts. No system is perfectly secure; if you believe your account has been compromised, change your password and contact support immediately.

7. Your rights

Depending on your jurisdiction, you may have the right to access, correct, export or delete your personal data, to object to certain processing, or to withdraw consent. To exercise a right, contact us through the live chat or the support email in your dashboard. You may also complain to your local data protection authority.

8. Cookies and local storage

We use strictly necessary cookies to keep you signed in and to protect forms against CSRF. The live chat widget may set its own cookies when it loads. We do not use advertising cookies.

9. International transfers

Our providers may process data in countries other than yours. Where required, transfers are protected by appropriate safeguards such as standard contractual clauses.

10. Changes and contact

We may update this policy as the Platform evolves. The "last updated" date above always reflects the current version. For privacy questions, use the live chat or the support email in your dashboard.