Privacy Policy

Last Updated: September 10, 2026

1. Introduction

Welcome to RangeScout ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services at rangescout.app (the "Service").

By using our Service, you consent to the data practices described in this policy. If you do not agree with this policy, please discontinue use of our Service immediately.

2. Information We Collect

2.1 Information You Provide

We collect information that you voluntarily provide when you:

  • Create an account (email address, name, password)
  • Subscribe to a paid plan (billing information processed by Stripe)
  • Contact customer support (email communications)
  • Participate in surveys or provide feedback

2.2 Automatically Collected Information

When you access our Service, we automatically collect:

  • Usage Data: Pages viewed, features used, time spent, actions taken
  • Device Information: Browser type, operating system, device type
  • Analytics Data: IP address (anonymized), general location (country/city level)
  • Cookies: Session identifiers, authentication tokens, analytics cookies

2.3 Third-Party Data

We receive information from third-party services:

  • Stripe: Payment processing and subscription status
  • Google Analytics: Anonymized usage patterns and traffic sources
  • Email Service (Resend): Email delivery status and engagement

2.4 Data We Do NOT Collect

We explicitly do NOT collect or store:

  • Cryptocurrency wallet addresses
  • Private keys or seed phrases
  • On-chain transaction data
  • Trading positions or portfolio holdings

3. How We Use Your Information

We use your information for the following purposes:

  • Provide Services: Deliver pool analysis, save your analysis history, track credit usage
  • Account Management: Authenticate users, manage subscriptions, send transactional emails
  • Improve Services: Analyze usage patterns, identify bugs, develop new features
  • Customer Support: Respond to inquiries, troubleshoot issues, provide assistance
  • Security: Detect fraud, prevent abuse, protect against unauthorized access
  • Legal Compliance: Comply with legal obligations and enforce our Terms of Service
  • Marketing: Send product updates and promotional emails (opt-out available)

4. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA), UK, and Switzerland, we process your data based on:

  • Contractual Necessity: Processing required to provide our Service under our Terms
  • Consent: You have given explicit consent for specific processing activities
  • Legitimate Interests: Processing necessary for our legitimate business interests (analytics, fraud prevention)
  • Legal Obligation: Compliance with applicable laws and regulations

5. Data Sharing and Disclosure

5.1 Third-Party Service Providers

We share data with trusted service providers who assist in operating our Service:

  • Stripe: Payment processing (PCI-DSS compliant)
  • Railway: Cloud infrastructure and hosting
  • Google Analytics: Website analytics (anonymized data)
  • Resend: Transactional email delivery
  • Anthropic: AI-powered analysis features
  • OpenAI: Pool analysis, strategy explanations and follow-up questions when enabled

5.2 Legal Requirements

We may disclose your information if required by law or to:

  • Comply with legal processes (subpoenas, court orders)
  • Enforce our Terms of Service
  • Protect our rights, property, or safety
  • Prevent fraud or security threats

5.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity. We will notify you of any such change via email and prominent notice on our Service.

5.4 We Do NOT Sell Your Data

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

6. Data Security

We implement industry-standard security measures to protect your data:

  • Encryption: All data transmitted over HTTPS/TLS encryption
  • Password Security: Passwords hashed using bcrypt with salt
  • Access Controls: Restricted access to personal data on need-to-know basis
  • Monitoring: Continuous security monitoring and incident response
  • Regular Audits: Periodic security assessments and vulnerability scanning

However, no method of transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

7. Data Retention

We retain your personal information for as long as necessary to:

  • Provide our Service and maintain your account
  • Comply with legal, accounting, or reporting requirements
  • Resolve disputes and enforce our agreements

When you delete your account, we will delete or anonymize your personal data within 30 days, except where retention is required by law or for legitimate business purposes (e.g., fraud prevention).

8. Your Rights Under GDPR

If you are located in the EEA, UK, or Switzerland, you have the following rights:

  • Right to Access: Request a copy of your personal data we hold
  • Right to Rectification: Correct inaccurate or incomplete data
  • Right to Erasure ("Right to be Forgotten"): Request deletion of your data
  • Right to Restrict Processing: Limit how we use your data
  • Right to Data Portability: Receive your data in machine-readable format
  • Right to Object: Object to processing based on legitimate interests
  • Right to Withdraw Consent: Withdraw consent for specific processing activities
  • Right to Lodge a Complaint: File a complaint with your local data protection authority

To exercise these rights, contact us at [email protected]. We will respond within 30 days of receiving your request.

9. Cookies and Tracking Technologies

We use cookies and similar technologies to:

  • Essential Cookies: Required for authentication and core functionality
  • Analytics Cookies: Track usage patterns and improve user experience (Google Analytics)
  • Preference Cookies: Remember your settings and preferences

You can control cookies through your browser settings. Note that disabling essential cookies may limit your ability to use certain features of our Service.

10. International Data Transfers

Our Service is hosted in the United States. If you access our Service from outside the U.S., your information may be transferred to, stored, and processed in the U.S. and other countries where our service providers operate.

We ensure appropriate safeguards are in place for international transfers, including Standard Contractual Clauses (SCCs) approved by the European Commission for GDPR compliance.

11. Children's Privacy

Our Service is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us immediately and we will delete such information from our systems.

12. Third-Party Links

Our Service may contain links to third-party websites (e.g., DEX interfaces, blockchain explorers). We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.

13. California Privacy Rights (CCPA)

California residents have additional rights under the California Consumer Privacy Act (CCPA):

  • Right to Know: Request disclosure of data collected, used, and shared
  • Right to Delete: Request deletion of your personal information
  • Right to Opt-Out: Opt-out of sale of personal data (we do not sell data)
  • Right to Non-Discrimination: Equal service regardless of privacy rights exercise

To exercise these rights, contact us at [email protected].

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

  • Posting the updated policy on this page with a new "Last Updated" date
  • Sending an email notification to your registered email address
  • Displaying a prominent notice on our Service

Your continued use of the Service after changes become effective constitutes acceptance of the updated policy.

15. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

RangeScout Privacy Team
Email: [email protected]
Website: https://rangescout.app

For GDPR-related inquiries, please include "GDPR Request" in the subject line. We will respond within 30 days of receiving your request.

By using RangeScout, you acknowledge that you have read and understood this Privacy Policy and agree to the collection, use, and disclosure of your information as described herein.