Effective date: 8 October 2026 | Replaces: version of 17 April 2020
Your privacy at a glance
- We collect only what we need to run altFINS. We never sell your personal data.
- We do not train AI models on your data. This includes your portfolio, watchlist, tool arguments, logs and account data.
- When you connect an AI assistant such as Claude, it reads market data and, only when you ask about “my” data, your portfolio and watchlist. We never see your conversation.
- Connector access tokens expire after 1 hour. Connections expire after 30 days without use. Logs are deleted after 7 days.
- When you delete your account, your portfolio, watchlists and alerts are deleted immediately.
- We use analytics and advertising cookies to improve altFINS and measure our campaigns. You can block them in your browser settings at any time. Email [email protected] to use your rights.
Contents
- Who we are and what this policy covers
- Key terms
- Data we collect
- AI assistants, the altFINS connector and API access
- Trading, wallets and exchange connections
- Why we use your data and our legal basis
- Cookies and analytics
- Who we share data with and international transfers
- How long we keep your data
- Security, marketing and children
- Your rights
- Additional information for users outside the EU
- Changes to this policy
- Contact us
1. Who we are and what this policy covers
We are altFINS, j. s. a., registered at Staromestská 3, 811 03 Bratislava, Slovak Republic, company ID 51 781 646, entered in the Commercial Register of the City Court Bratislava III, Section Sja, Entry No. 50/B. We are the data controller for the personal data described here.
This policy explains what personal data we collect, why, how long we keep it, who we share it with, and how you control it. It applies to:
- the website and platform at www.altfins.com, including the screener, technical analysis, chart patterns, signals, portfolio, watchlist and alerts;
- our iOS and Android apps;
- trading features, including the altFINS DEX aggregator;
- the altFINS API, Data API and crypto widgets;
- the altFINS connector for AI assistants (for example Claude), which lets an AI assistant query altFINS on your behalf.
We process personal data under the EU General Data Protection Regulation (EU) 2016/679 (“GDPR”) and Slovak Act No. 18/2018 Coll. on the Protection of Personal Data, as amended.
Contact us at [email protected].
Information on altFINS is for information and education only. It is not investment, legal or tax advice.
2. Key terms
| Term | Meaning |
|---|---|
| Personal data | Any information that identifies you directly or indirectly, such as your email, user ID, IP address or wallet address |
| Usage data | Technical data collected automatically: IP address, browser, device, pages visited, time and duration of visits |
| Services | The altFINS website, platform, mobile apps, trading features, API, widgets and AI connector |
| AI assistant | A third-party AI product, such as Claude, that you choose to connect to your altFINS account |
| Connector | The altFINS service, built on the Model Context Protocol, that lets an AI assistant call altFINS tools |
| Tool call | A single request an AI assistant sends to the connector, for example “run a screener for coins in an uptrend” |
| Tool arguments | The parameters inside a tool call, such as coin symbols, timeframes or filter values |
| OAuth grant | Your permission for an AI assistant to access your altFINS account, made up of an access token and a refresh token |
| Processor | A company that processes personal data on our behalf and under our instructions |
3. Data we collect
We collect only what we need to run altFINS and improve it.
Data you give us
- Account data: email address and password (stored hashed).
- Subscription data: plan, billing country and transaction records. Card payments are handled by our payment provider; we do not store full card numbers.
- Content you create: portfolios, watchlists, alerts, saved screener filters and settings.
- Trading and wallet data: see Section 5.
- Partner and bounty program data: name, email and payout details, if you join.
- Messages you send to our support team.
Data we collect automatically
- Usage data and cookies (see Section 7).
- Mobile app data: device model, operating system, app version, device identifiers, push notification tokens and crash reports.
- System logs needed to run and secure the Services.
We do not ask for special categories of data (health, religion, political opinions, biometrics and similar). Please do not send them to us.
4. AI assistants, the altFINS connector and API access
When you connect an AI assistant to altFINS, the connector reads market data and, only when you ask about “my” data, your own portfolio and watchlist. Access tokens expire after 1 hour, and a connection expires after 30 days without use. Tool-call logs are deleted after 7 days. We never see your conversation with the assistant.
4.1 How the connection works
You start the connection from your AI assistant, for example by adding altFINS as a connector in Claude. You then sign in to altFINS and approve access through OAuth. The assistant never receives your altFINS password.
4.2 What the connector reads
- Market data, always. Prices, OHLC history, screener results, technical analysis, chart patterns, signals, on-chain and analytics data, crypto news and events. This is not personal data.
- Your own account data, only when a tool asks for it. When you ask the assistant about your data (for example, “How is my portfolio doing?” or “Which coins on my watchlist are breaking out?”), the connector reads your portfolio and watchlist.
- Nothing else. The connector does not read your password, payment details, wallet or exchange connections, support messages or any other user’s data.
4.3 What we store and for how long
| Data | Contents | Retention |
|---|---|---|
| OAuth access token | Lets the assistant call altFINS for you | Expires after 1 hour |
| OAuth refresh token | Lets the assistant get a new access token without you signing in again | Expires after 30 days without use, within 1 hour |
| Tool-call logs | Your user ID, the tool called, the tool arguments (e.g. coin symbols, filters, timeframes), time, status and errors | 7 days, then deleted |
Tool-call logs are stored as log files on our own servers. They are not sent to any third-party logging service.
We use tool-call logs to run the connector, fix errors, prevent abuse and enforce rate limits. We do not use them for advertising, and we do not sell them.
4.4 Where results go
Results go only to the AI assistant you connected, which shows them to you. We receive no conversation content: no prompts, chat history or assistant replies. The only part of your conversation we see is the tool arguments the assistant sends us.
Your AI assistant provider processes your conversation, including altFINS results, under its own privacy policy. For Claude, that is Anthropic’s privacy policy.
4.5 We do not train AI models on your data
altFINS does not use your personal data to train artificial intelligence or machine learning models. This includes tool arguments, tool-call logs, portfolios, watchlists, alerts, trading data and account data. It applies to our own models and to any third party.
4.6 API access
If you use the altFINS API or Data API with an API key, we log requests (key ID, endpoint, parameters, time, IP address) for security and rate limiting. These logs are deleted after 7 days. API keys stay valid until you revoke them in your account.
4.7 How to disconnect and whom to contact
- Disconnect in your AI assistant. In Claude, remove or disconnect the altFINS connector in your connector settings. This within 1 hour.
- Revoke from altFINS. You can also ask us to revoke all connected apps on your account.
- After you disconnect, the assistant can no longer read your data and your tokens stop working. Existing tool-call logs are deleted within 7 days.
- Questions or requests: [email protected].
5. Trading, wallets and exchange connections
altFINS never takes custody of your funds and never asks for your private keys or seed phrase.
- DEX aggregator. When you trade through the altFINS DEX aggregator, we process your public wallet address and transaction details to route and display your trade. Transactions are signed in your own wallet. Blockchain transactions are public and permanent; we cannot delete them.
- Wallet addresses for portfolio tracking. If you add a public wallet address, we read its public balances and transactions to show your portfolio.
- Exchange connections. If you connect an exchange account with API keys, we accept read-only keys only, encrypt them at rest, use them only to sync balances and trades, and delete them when you disconnect.
6. Why we use your data and our legal basis
Every use of your data rests on one of the legal bases in Article 6 GDPR.
| Purpose | Examples | Legal basis |
|---|---|---|
| Provide the Services | Account, portfolio, watchlist, alerts, trading features, subscriptions, API and AI connector | Performance of a contract |
| Customer support | Answering your questions and requests | Performance of a contract |
| Security and abuse prevention | System logs, tool-call logs, rate limiting, fraud prevention | Legitimate interests |
| Improve the Services | Error analysis, aggregated usage statistics, testing new features | Legitimate interests |
| Analytics cookies | Google Analytics on the website | Consent |
| Marketing emails and personalised advertising | Newsletters, trading tips, product updates | Consent (withdraw at any time) |
| Partner and bounty programs | Tracking referrals and paying rewards | Performance of a contract |
| Surveys | Product research | Consent |
| Legal obligations | Tax and accounting records, responding to authorities | Legal obligation |
Where we rely on legitimate interests, we have checked that they do not override your rights. You can object at any time (Section 11).
7. Cookies and analytics
We use essential cookies to keep you signed in and the platform working. We also use analytics cookies (Google Analytics) and advertising cookies (Google Ads) to understand how altFINS is used and to measure our campaigns. We are updating our cookie banner so that these cookies run only after you accept them. Until then, you can block them in your browser settings or with the Google Analytics opt-out add-on. Details are in our Cookies Policy.
- Essential cookies (for example session cookies) are needed for the Services to work and do not require consent.
- Analytics cookies help us understand how the Services are used. We use Google Analytics, provided in the EEA by Google Ireland Limited. Google Analytics 4 does not log or store IP addresses.
- Push notifications on the website and in the apps are optional. You can switch them off in your browser or device settings at any time.
You can block and delete cookies in your browser settings at any time. Some features may not work fully without essential cookies.
8. Who we share data with and international transfers
We do not sell your personal data. We share it only with the parties below, and only what each needs.
- Companies in the altFINS group that help us run the Services, bound by confidentiality.
- Processors acting on our instructions under a data processing agreement: server hosting, email delivery, payment processing, analytics, push notifications and customer support tools. A current list is available on request.
- The AI assistant you connect. Results go to the assistant you chose (Section 4). That provider acts under its own privacy policy, not as our processor.
- Authorities and courts when the law requires it.
- A buyer or successor if altFINS is involved in a merger or acquisition, under the same protections.
Business customers. Companies that embed altFINS widgets or use our Data API in their own products are responsible for their own users’ data under their own privacy policies.
International transfers. Some of our providers, including our server hosting provider, process data outside the European Economic Area (EEA). We protect these transfers with:
- an adequacy decision of the European Commission, including the EU-US Data Privacy Framework (adopted 10 July 2023) for US providers certified under it; or
- the European Commission’s Standard Contractual Clauses, with additional measures where needed.
You can ask us for a copy of the relevant safeguards.
9. How long we keep your data
We keep personal data only as long as each purpose needs it, then delete or irreversibly anonymise it.
| Data | Retention |
|---|---|
| OAuth access token (AI connector) | 1 hour |
| OAuth refresh token (AI connector) | 30 days without use, or until you disconnect |
| Tool-call logs, including tool arguments | 7 days, then deleted |
| API request logs and system logs | 7 days, then deleted |
| API keys | Until you revoke them or delete your account |
| Exchange API keys | Until you disconnect the exchange or delete your account |
| Account data, portfolios, watchlists, alerts, wallet addresses | While your account is active; deleted immediately when you delete your account |
| Support messages | As long as needed to resolve your request; deleted when you delete your account |
| Analytics data | 14 months from your last visit (Google Analytics setting) |
| Partner and bounty program records | As long as Slovak accounting and tax law requires for payments (up to 10 years) |
| Billing and invoice records | As long as Slovak accounting and tax law requires (up to 10 years) |
| Marketing consent and email preferences | Until you unsubscribe, then kept only as a suppression record |
Database backups. We keep backups of our database to protect against data loss. When you delete your account, copies of your data in these backups are removed when the backups are overwritten in their regular cycle. Until then, backups are not used for any other purpose.
We may keep data longer if the law requires it or to establish or defend legal claims.
10. Security, marketing and children
Security. We protect your data with encryption in transit, access controls, hashed passwords, short-lived OAuth tokens and regular reviews of who can access what. No system is perfectly secure. If a breach affects your data, we will notify you and the authorities as the GDPR requires.
Marketing emails. We send trading tips, product news and offers only with your consent. Every email has an unsubscribe link, or you can write to [email protected]. Our emails may tell us whether you opened them or clicked a link, so we can improve them.
Children. altFINS is not for anyone under 18. We do not knowingly collect their data. If you believe a minor has given us personal data, contact [email protected] and we will delete it and close the account.
11. Your rights
You control your data. Email [email protected] to use any of these rights. We reply within one month, free of charge.
- Access: get a copy of the data we hold about you.
- Rectification: correct inaccurate or incomplete data.
- Erasure: ask us to delete your data, or delete your account yourself.
- Restriction: ask us to limit how we use your data.
- Portability: receive your data in a machine-readable format.
- Objection: object to processing based on legitimate interests, and to direct marketing at any time.
- Withdraw consent: at any time, without affecting earlier processing.
- No solely automated decisions: we do not make decisions with legal or similarly significant effects about you based solely on automated processing.
- Disconnect AI assistants: revoke connector access at any time (Section 4.7).
We may ask you to verify your identity before acting on a request.
Complaints. You can complain to the Slovak data protection authority, Úrad na ochranu osobných údajov Slovenskej republiky, Hraničná 12, 820 07 Bratislava (dataprotection.gov.sk), or to the authority in your EU country (list of EEA authorities).
12. Additional information for users outside the EU
United Kingdom. If you are in the UK, you have the same rights under the UK GDPR. You can complain to the Information Commissioner’s Office (ico.org.uk).
California. If you live in California, you have the right to know what personal information we collect, use and disclose; to request deletion and correction; and not to be discriminated against for using these rights. We do not sell your personal information, and we do not use sensitive personal information beyond what is needed to provide the Services. Email [email protected] to make a request.
Other countries. Wherever you live, you can contact us to use the rights in Section 11 and we will respond under the law that applies to you.
13. Changes to this policy
We update this policy when our Services or the law change. The current version is always at altfins.com/privacy-policy, with its effective date at the top. For material changes, we will notify you by email or in the platform before they take effect. Earlier versions are available on request.
14. Contact us
Privacy questions and requests: [email protected]
General enquiries: [email protected]
Post: Staromestská 3, 811 03 Bratislava, Slovakia