Privacy Policy

NeverHodl™ — Crypto Market Intelligence Platform
This policy applies to neverhodl.com and all associated services.

1. DATA CONTROLLER

NeverHodl™
Operator: Luis Armando Fraga
Address: Carrer de Sardenya, 229, 4a, 08013 Barcelona, Spain
Contact: privacy@neverhodl.com
Trademark: OEPM España Ref. EFDBAE5B8 — Class 36+42

2. DATA WE COLLECT

2.1 Data you provide directly

DATA	PURPOSE	LEGAL BASIS	RETENTION
Email address (newsletter)	Send market analysis updates	Consent (Art. 6(1)(a) GDPR)	Until unsubscribe
AI Agent conversation	Generate market analysis responses	Contract performance	Session only — not stored

2.2 Data collected automatically

DATA	PURPOSE	RETENTION
Browser language preference	Display content in your language	localStorage — client only
Theme preference (dark/light)	UI personalisation	localStorage — client only
IP address (API calls)	Rate limiting AI Agent (5 req/6h)	In-memory — not persisted
Usage analytics (GA4)	Platform improvement	26 months (Google)

2.3 Data we do NOT collect

• No financial data, portfolio data or trading activity
• No biometric data
• No precise geolocation
• No cross-site behavioural tracking
• No advertising profiles

3. COOKIES

We use only strictly technical cookies. No advertising cookies, no cross-site tracking.

COOKIE	TYPE	PURPOSE
nhLang	localStorage	Language preference
nhTheme	localStorage	Dark/light mode preference
nhCookieOK	localStorage	Cookie banner dismissal
nhAgentOK	sessionStorage	AI Agent session unlock
nhAgent	localStorage	AI Agent rate limit tracking
_ga, _ga_*	Cookie	Google Analytics 4 (if consented)

4. THIRD-PARTY SERVICES

SERVICE	PURPOSE	PRIVACY POLICY
Google Analytics 4	Usage analytics	policies.google.com
Formspree	Newsletter subscriptions	formspree.io
Anthropic (Claude)	AI Agent responses	anthropic.com
Vercel	Hosting & CDN	vercel.com
Kraken, CoinGecko, Alternative.me	Live market data	Respective sites
Google Fonts	Typography	policies.google.com

AI Agent conversations are sent to Anthropic for processing. Conversations are not stored by NeverHodl beyond the browser session. Anthropic's data retention policies apply to their processing.

5. YOUR RIGHTS (GDPR / LGPD)

Under GDPR (EU) and LGPD (Brazil), you have the following rights:

• Access: Request a copy of data we hold about you
• Rectification: Correct inaccurate data
• Erasure: Request deletion of your data ("right to be forgotten")
• Portability: Receive your data in a portable format
• Objection: Object to processing based on legitimate interest
• Withdraw consent: At any time for newsletter subscriptions
• Complaint: Lodge a complaint with your national supervisory authority (AEPD for Spain, ANPD for Brazil)

To exercise any right: privacy@neverhodl.com — we respond within 30 days.

6. DATA SECURITY

We implement appropriate technical and organisational measures to protect your data:

• HTTPS/TLS encryption for all data in transit
• No sensitive data stored in browser localStorage (only preferences)
• API keys stored exclusively in server-side environment variables
• Regular security audits of third-party dependencies

7. INTERNATIONAL TRANSFERS

Data may be processed in the United States (Google, Anthropic, Vercel) under Standard Contractual Clauses (SCCs) approved by the European Commission, providing adequate protection for international transfers.

8. CHILDREN

NeverHodl is not directed at individuals under 18 years of age. We do not knowingly collect data from minors. If you believe a minor has provided data, contact us immediately at privacy@neverhodl.com.

9. CHANGES TO THIS POLICY

We will notify newsletter subscribers of material changes at least 30 days before they take effect. The "Last Updated" date at the top of this page indicates the most recent revision.

10. CONTACT