Privacy policy

1. Who is responsible for your data

SmartPips, Baku, Azerbaijan, is the controller of the personal data described here. For any privacy question, or to exercise any right below, write to support@smartpips.pro.

2. What we collect

Data you give us when you register or write to us:

• first name, last name and country;
• email address and Telegram username, so we can deliver signals and confirm who you are;
• your password, stored only as a one-way cryptographic hash — we never see it and cannot recover it;
• anything you type into the contact form.

Data created automatically as you use the site:

• six-digit verification codes, stored hashed, with their expiry and attempt count;
• sign-in timestamps and the pages you request;
• IP address, browser and device type, kept in server logs for security and abuse prevention;
• your theme and language preference, stored in your own browser.

We do not store card numbers. Payments are handled by a payment provider that receives the card details directly; we only see the outcome, the amount, and a reference.

3. Why we use it, and on what basis

• To perform our contract with you — creating your account, verifying your email, delivering signals, running your subscription, and answering your messages.
• For our legitimate interests — keeping the service secure, preventing fraud and redistribution, measuring which pages are used, and improving what we publish.
• With your consent — sending you occasional product news, which you can withdraw at any time.
• To meet legal obligations — accounting, tax and any lawful request we are obliged to answer.

4. Cookies and browser storage

We use the smallest set that makes the site work:

• a session cookie that keeps you signed in;
• a CSRF token that protects forms from being submitted from another site;
• local storage entries that remember your light or dark theme and your language.

We do not run advertising trackers, we do not build profiles for advertisers, and we do not sell audience data.

5. Who we share it with

Only with the providers that make the service run, and only with what each of them needs:

• our hosting provider, which stores the site and its database;
• our email provider, which delivers verification codes and service messages;
• our payment provider, which processes subscriptions and purchases;
• Telegram, if you choose to receive signals there;
• professional advisers, or an authority, where the law requires it.

We never sell personal data, and we do not pass it to third parties for their own marketing.

6. Where your data is processed

Our servers and providers may be located outside your country. Where data leaves your jurisdiction we rely on the safeguards our providers offer, including standard contractual clauses where those apply.

7. How long we keep it

• Account data: while your account is open, and up to 24 months after you close it, so that we can resolve disputes and meet accounting duties.
• Verification codes: deleted or expired within minutes; the record of an attempt is kept up to 30 days for security.
• Contact messages: up to 24 months.
• Payment records: for the period our tax obligations require, typically five years.
• Server logs: up to 12 months.

8. How we protect it

The whole site is served over HTTPS. Passwords are hashed, verification codes are hashed and time-limited, sessions are regenerated on sign-in, and forms are protected against cross-site request forgery. Access to the database is limited to the people who need it.

No system is perfect. If a breach ever affects your data and creates a real risk to you, we will tell you and the relevant authority without undue delay.

9. Your rights

Depending on where you live you may ask us to:

• give you a copy of the data we hold about you;
• correct anything inaccurate;
• delete your data, where we have no overriding obligation to keep it;
• restrict or object to a particular use;
• send your data to you, or to another provider, in a portable format;
• withdraw a consent you previously gave.

Write to support@smartpips.pro and we will answer within 30 days. You also have the right to complain to the data-protection authority in your country.

10. Children

The service is not intended for anyone under 18 and we do not knowingly collect their data. If you believe a minor has registered, tell us and we will remove the account.

11. Marketing

Service messages — verification codes, billing notices, changes to these documents — are part of the contract and cannot be switched off while your account is open. Anything promotional carries an unsubscribe link and stops the moment you use it.

12. Changes to this policy

If we change how we use your data we will update this page and change the date at the top. Material changes are announced by email before they take effect.

13. Contact

Privacy questions go to support@smartpips.pro, or by post to Baku, Azerbaijan.