Privacy Policy

Last updated: August 2026 · Agreed Financial Tech Private Limited · coinscanner.tech

This Privacy Policy explains how Agreed Financial Tech Private Limited ("we", "us", "our", or the "Company"), a company incorporated in India, collects, uses, discloses, and protects information about you when you use the CoinScanner website at coinscanner.tech and related services (the "Service").

CoinScanner is a cryptocurrency market-data and tracking platform. It is accessible worldwide, but the Company is based in India and the Service is operated from India. By using the Service, you consent to the practices described in this policy.

1. Who we are & how to contact us

The data controller responsible for your personal data is Agreed Financial Tech Private Limited (coinscanner.tech). For any privacy question, or to exercise your rights, contact us at support@coinscanner.tech.

2. Information we collect

2.1 Account information. When you register or use your account we collect and store your email address, your name, and, if you choose to provide it, your phone number. Your phone number is optional and you can use the Service fully without it. If you register with a password, it is stored only as a securely hashed value; we never store your password in plain text and cannot see it. If you register using Sign in with Google, no CoinScanner password is created for your account, and we store the information described in section 5. We also store the verification status of your email and phone, and your account status.

2.2 Information generated by your use of the Service. Your watchlists (the coins and exchanges you add); security and login records — a login log containing your IP address, the identifier used to log in, whether the attempt succeeded, a reason code, and a timestamp, used to protect your account and automatically deleted after 90 days; and account-security counters such as failed login attempts and temporary lockout timing, used to prevent brute-force attacks.

2.3 Investor form. If you submit an investor inquiry, we collect your name, email, organisation (optional), inquiry type, and message so we can respond to you.

2.4 Cookies. We use a single strictly-necessary session cookie to keep you logged in and to protect the site. See our Cookie Policy. We do not use advertising or cross-site tracking cookies.

3. How we use your information

We use your information to: create and manage your account and authenticate you when you log in; send one-time passcodes (OTPs) to verify your email or phone and to reset your password; provide your personalised watchlists and features; protect the Service and detect and prevent fraud, abuse, and unauthorised access; respond to your inquiries and support requests; and comply with legal obligations under applicable Indian law. We do not sell your personal data.

4. OTP delivery, email, and messaging

You can log in either with a password or with Sign in with Google. Where you use a password, one-time passcodes (OTPs) are used only to verify your email or phone number and to reset a forgotten password. Accounts created through Google are verified by Google and do not require an OTP to sign in. To deliver these, we share the minimum data necessary (your email address or phone number and the code) with Resend for delivering emails, and CampaignBot for delivering WhatsApp messages to your phone number.

5. Signing in with Google

5.1 What Google shares with us. You can create a CoinScanner account or sign in using your Google Account. If you choose this option, Google confirms your identity for us and shares a limited set of information with CoinScanner: your name, your email address, your profile picture, and a unique Google account identifier.

5.2 How we use it. We use this information only to create, secure, and operate your CoinScanner account. Your email address is used as your account identity, to sign you in, and to send essential account messages such as security notices. Your name and profile picture are used to personalise your account within the Service. The unique Google account identifier is stored so that we recognise you as the same user on your later visits.

5.3 How we store it. This information is stored on our servers, hosted with Railway, for as long as your account remains open. It is covered by the same security measures described in section 12.

5.4 What we never do. We never receive and never ask for your Google password. We do not request access to your Gmail, Google Drive, contacts, calendar, photos, or any other Google service. We do not use information received from Google for advertising or profiling, we do not sell it, and we do not share it with third parties for their own purposes. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

5.5 Disconnecting and deleting. You can ask us to delete your CoinScanner account at any time by emailing support@coinscanner.tech. When your account is deleted we remove your email address, name, profile picture, phone number if you provided one, your watchlists, and your preferences from our systems, and the connection between your Google Account and CoinScanner is removed. You can separately revoke CoinScanner’s access from your Google Account at any time at myaccount.google.com/permissions.

6. Third-party services we rely on

We use the following third parties. Where they process personal data, they act as our processors or as independent controllers under their own policies: Google (Sign in with Google, which confirms your identity when you choose that option, as described in section 5); Railway (cloud hosting and database infrastructure); Resend (transactional email OTPs); CampaignBot (WhatsApp OTP delivery); Sentry (error monitoring to diagnose crashes — configured to redact sensitive fields); Google Analytics (GA4) (site usage analytics — receives your internal account ID when logged in, but not your name, email, or phone number, under Google's privacy policy); CoinDCX (market-data provider — we fetch public cryptocurrency market data from them and do not send them your personal data); TradingView (chart widget embedded on coin pages — loaded in your browser under TradingView's own privacy policy); exchangerate-api.com (USD to INR conversion rate — server-side fetch, no personal data sent); and newsdata.io (news provider — we fetch cryptocurrency news articles and do not send them your personal data).

7. Affiliate links

CoinScanner may display affiliate links to cryptocurrency exchanges and other third parties. If you click one and take an action (such as signing up), we may earn a commission at no extra cost to you. Those third-party sites have their own privacy policies, which govern any data you provide to them. We are not responsible for their practices.

8. Legal bases (for users in the EEA/UK)

Where the EU/UK GDPR applies, we process your data on these bases: performance of a contract (to provide your account and features); legitimate interests (to secure the Service and prevent abuse); consent (where required); and legal obligation (where the law requires it).

9. International data transfers

Because the Service is operated from India and uses global service providers (including our cloud host, email, WhatsApp, error-monitoring, and market-data providers), your information may be processed in India and other countries whose data-protection laws may differ from those in your country. Where required by applicable law (including the EU/UK GDPR), we implement appropriate safeguards for such transfers, which may include entering into Standard Contractual Clauses (SCCs) approved by the European Commission or equivalent measures, or relying on other lawful transfer mechanisms available under applicable law.

10. Data retention

Account data is retained for as long as your account is active. Login-log records are automatically deleted after 90 days. Investor-inquiry records are retained for as long as needed to handle your request and for our legitimate business records. When you delete your account, your associated watchlist data is removed. We may retain limited information where required to comply with legal obligations or resolve disputes.

11. Your rights

Subject to applicable law (including India’s Digital Personal Data Protection Act, 2023 and, where applicable, the GDPR), you may have the right to: access the personal data we hold about you; correct inaccurate or incomplete data; request deletion of your data and account — currently handled by emailing us at support@coinscanner.tech, and we will action verified deletion requests without undue delay; withdraw consent where processing is based on consent; object to or restrict certain processing; and lodge a complaint with a data-protection authority. To exercise any of these, email us at support@coinscanner.tech. We may need to verify your identity first.

12. Security

We protect your account with hashed passwords, HTTPS encryption in transit, HttpOnly and SameSite session cookies, CSRF protection, rate-limiting, and account lockout after repeated failed logins. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

13. Children

The Service is not directed to children under 18, and we do not knowingly collect their data. If you believe a child has provided us data, contact us and we will delete it.

14. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version here and revise the "Last updated" date. Material changes may be notified to you by email or on the Service.

15. Governing law

This Privacy Policy is governed by the laws of India. Any disputes are subject to the exclusive jurisdiction of the courts of Thiruvallur, India, without prejudice to any mandatory rights you may have under the laws of your country of residence.