Privacy Policy
Last updated: June 24, 2026
At Bitcox we respect your privacy. This policy explains what personal data we process, for what purposes, with whom we share it, and the rights you have. It applies to the app.bitcox.co website and to our iOS and Android mobile apps, which load the same service.
1. Data controller
Bitcox is a service operated by its owner, Gian Franco La Rosa (an individual), based in Florida, United States. For any matter related to your personal data, contact us at privacy@bitcox.co.
2. Data we collect
We process the following categories of data:
- Account data: your email address and password (stored encrypted/hashed); and your name if you choose to provide it.
- Push notification token: when you use the mobile app and allow notifications, we collect the device notification identifier (FCM token on Android and APNs token on iOS) and send it to our server so we can deliver signal alerts. It is not your phone number or an advertising identifier.
- Service usage data: the signals you view, your watchlist, the alerts you set, and your interactions with the platform.
- Payment data: subscriptions are processed through Stripe on the web. We do not store your full card details; we keep customer/subscription identifiers and payment status.
- Technical data: IP address, device and browser type, and logs needed for security and operation of the service.
3. How we use your data
- Create and manage your account and authenticate you.
- Send you push notifications for signals and alerts (using the push token).
- Provide and improve the service: show signals, watchlist and analysis.
- Process payments and manage your subscription through Stripe.
- Ensure security, prevent fraud and comply with legal obligations.
- We do not sell your personal data.
4. Legal basis (GDPR)
Where the EU General Data Protection Regulation applies, we process your data on the following bases:
- Performance of a contract: to provide the service and manage your subscription.
- Your consent: for push notifications, which you can withdraw at any time by disabling them.
- Legitimate interest: for security and service improvement.
- Legal obligation: for billing and applicable requirements.
5. Who we share your data with
We share only what is necessary with providers acting as data processors:
- Google Firebase (Cloud Messaging / FCM) — push notification delivery on Android and iOS. policies.google.com/privacy
- Apple (APNs) — push notification delivery on iOS. www.apple.com/legal/privacy/
- Stripe — subscription payment processing. stripe.com/privacy
- DigitalOcean — server hosting and infrastructure. www.digitalocean.com/legal/privacy-policy
6. International transfers
Some of our providers (Google, Apple, Stripe) may process data outside your country of residence. Where this happens, such transfers rely on applicable legal mechanisms, such as the European Commission Standard Contractual Clauses.
7. Data retention
We keep your account data while your account remains active. The push notification token is kept while the app is installed and notifications are authorized; it is removed when you log out, uninstall the app, or disable notifications. After your account is deleted, we erase or anonymize your data, except what we must keep to comply with legal or tax obligations.
8. Your rights
You can exercise the following rights over your personal data:
- Access, rectification and erasure.
- Restriction of and objection to processing.
- Data portability.
- Withdraw your consent at any time.
- To exercise any of these rights, or to request deletion of your account and data, email us at privacy@bitcox.co. We will handle your request within the timeframes set by applicable law.
9. California residents (CCPA/CPRA)
If you reside in California, you have the right to know what personal data we collect, to request its deletion or correction, and to non-discrimination for exercising your rights. We do not sell or share your personal data for cross-context behavioral advertising. To exercise these rights, contact us at privacy@bitcox.co.
10. Security
We encrypt communications in transit (HTTPS/TLS) and apply reasonable technical and organizational measures to protect your data. No system is completely infallible, but we work to maintain an appropriate level of protection.
11. Cookies
We use strictly necessary cookies and local storage for login and your preferences (language and theme). See the details in our Cookie Policy.
12. Minors
The service is not directed to people under 18, and we do not knowingly collect data from minors. If you believe a minor has provided us with data, contact us to delete it.
13. Important notice: not financial advice
Bitcox provides informational and educational analysis about financial options. The content does not constitute financial or investment advice or a personalized recommendation. Investment decisions and their risks are solely yours; always verify data and prices in your own broker before trading.
14. Changes to this policy
We may update this policy from time to time. We will publish the current version with its last-updated date on this page.