Privacy Policy

Last updated: 4 July 2025

WhaleTrigger.com (“Whale Trigger”, “we”, “our”, or “us”) respects your privacy and is committed to protecting the personal information you share with us.This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit WhaleTrigger.com or use any related services, applications, APIs, or communication channels (collectively, the “Services”).

If you do not agree with any part of this Privacy Policy, please discontinue use of our Services.

1.Who We Are

• Entity: Whale Trigger
• Primary Location: Asia (remote-first engineering team; core servers in Singapore & Tokyo)
• Contact Email: [email protected]

2.Information We Collect

2.1Information You Provide Voluntarily

Note: We do not store your full payment-card number; that is handled by PCI-DSS–compliant processors.

2.2Information Collected Automatically

• Usage Logs: IP address, browser type, pages visited, referring URL, clicks, scroll depth
• Device Data: device model, OS version, language, time-zone
• Cookies & Local Storage: session tokens, preference flags (e.g. dark mode), CSRF tokens

2.3On-Chain & Market Data

When you add wallet addresses or tickers to watchlists, we fetch corresponding blockchain events from public nodes or third-party data providers. The wallet addresses themselves may be considered personal data if they can be linked to an individual.

3.How We Use Your Information

1. Service Delivery – create & maintain user accounts, send whale alerts, provide dashboards
2. Payment & Subscription Management – process invoices, detect failed payments, manage plan limits
3. Analytics & Performance – improve site speed, content relevance, feature roadmap (aggregated, pseudonymised data only)
4. Security & Abuse Prevention – detect bots, prevent DDoS, enforce rate limits
5. Marketing (Opt-In) – send newsletters & product updates; you can unsubscribe at any time
6. Legal & Compliance – satisfy KYC/AML checks where required and respond to lawful requests

4.Legal Bases for Processing (GDPR)

Depending on the context, Whale Trigger processes your personal data under one or more of the following grounds:

• Contract — To provide the Services you have requested or purchased, such as managing your account, sending whale alerts, and processing subscription payments.
• Legitimate Interest — To operate, maintain, and improve our platform, detect fraud, and keep the Service secure, provided these interests do not override your fundamental rights and freedoms.
• Consent — For optional activities like sending marketing communications or setting non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of processing carried out beforehand.
• Legal Obligation — To comply with laws and regulations, including tax reporting and anti-money-laundering (AML) requirements, and to respond to valid legal requests.

5.Sharing & Disclosure

We never sell or rent your personal data.We may share limited information with:

• Cloud Infrastructure: AWS, Cloudflare (hosting, caching, DDoS mitigation)
• Payment Processors: Stripe (USD & crypto), Midtrans (IDR)
• Analytics Providers: Plausible (self-hosted EU instance, cookie-free)
• Compliance Vendors: Chainalysis or similar, for large-value transactions
• Law Enforcement: only when legally compelled with a valid subpoena or court order

All vendors are bound by confidentiality and data-processing agreements.

6.International Transfers

Data may be processed and stored on servers located outside your jurisdiction, primarily in Singapore and Japan.We use Standard Contractual Clauses (SCCs) or equivalent safeguards when transferring data from the EEA/UK.

7.Data Retention

• Account Data: retained while account is active and for up to 90 days after deletion (for backup & legal audit)
• Payment Records: stored for 7 years to meet tax regulations
• Server Logs: rotated every 30 days unless required for security investigations

8.Your Rights

Subject to local laws, you may have the right to:

1. Access a copy of your personal data
2. Rectify inaccurate or incomplete data
3. Erase your data (“right to be forgotten”)
4. Restrict or object to certain processing
5. Port your data to another service
6. Withdraw consent at any time (marketing, cookies)

Request any of the above by emailing [email protected].We will respond within 30 days.

9.Children’s Privacy

Our Services are not directed to children under 16.We do not knowingly collect data from minors.If you believe a child has provided us personal information, please contact us so we can delete it.

10.Security Measures

• End-to-end TLS (HTTPS)
• Bcrypt-hashed passwords or Sign-in-With-Ethereum (EIP-4361)
• Cloudflare Web Application Firewall and rate limiting
• Regular penetration testing and dependency audits
• Principle-of-least-privilege access controls

Despite our efforts, no system is 100 % secure.Use strong, unique passwords and enable 2-factor authentication where possible.

11.Third-Party Links

WhaleTrigger.com may contain links to external sites (exchanges, wallets, partners).We have no control over their content or privacy practices.Review their policies before submitting any information.

12.Changes to This Policy

We may update this Privacy Policy from time to time.Revisions will be posted on this page with a new “Last updated” date.If changes are material, we will notify registered users via email or a prominent banner.

13.Contact Us

Questions, concerns, or requests?
Email: [email protected]

By using WhaleTrigger.com you acknowledge that you have read, understood, and agreed to this Privacy Policy.