Privacy Policy
Version 2026-09-30 · Effective 30 September 2026
Applies to: everyone whose personal information we handle through nobscrypto.com.au, the Terminal, the wallet and AI tools, our emails, the partner route and our community on Circle.
1. Who is responsible
Kyren Cater Consultancy F.Z.E (Ajman Free Zone, United Arab Emirates), trading as No BS Crypto, is responsible for your personal information.
Privacy questions and requests: support@nobscrypto.com.au.
We follow the UAE's Personal Data Protection Law (Federal Decree-Law No. 45 of 2021). Sections 10 and 11 add what the GDPR, the UK GDPR and the Australian Privacy Principles require.
2. What we collect
| Category | What | Where it comes from |
|---|---|---|
| Account | Email, name, community tier, membership status | You, and Circle |
| Sign-in | One-time codes; sign-in events (email and outcome) | You, and our systems |
| Terminal | Portfolios and holdings you enter; saved settings | You |
| AI | Your questions and the AI's answers, stored so you can see your history | You, and our AI tools |
| Wallet and billing | Balances, top-ups, credit use and subscriptions. Card details stay with Stripe | You, and Stripe |
| Partner route | Exchange UID, application records and outcomes | You, and the exchange |
| TradingView access | Your TradingView username | You |
| Contact form | Name, email, subject, message | You |
| Referrals | Only if you allow referral counting: a random visitor ID and an end time in the nobs_ref cookie; on our servers, a record of the visit (that visitor ID, the referring member's code, the time and the page you landed on); and, if you then sign up, the link between your account and that visit | Your browser, and our systems |
| Technical | IP address and request logs at our hosts; error logs | Your device, and our hosts |
We don't ask for sensitive information. Please don't put it in AI prompts or posts.
3. Why we use it, and on what basis
| Purpose | Information | Basis |
|---|---|---|
| Create and run your account; sign you in | Account, sign-in | Performing our contract with you |
| Provide the Terminal, portfolio tools and AI tools | Terminal, AI | Contract |
| Take payments, run the wallet, keep financial records | Wallet and billing | Contract; legal obligation |
| Check partner-route eligibility | Partner route | Contract, or steps you ask for before one |
| Give TradingView indicator access | TradingView username | Contract |
| Security and fraud prevention | Sign-in, technical | Legitimate interests (keeping accounts safe); legal obligation |
| Answer messages and complaints | Contact form | Contract; legitimate interests |
| Count referrals | Referral cookie | Consent |
| Send marketing emails, if you sign up for them | Email; your consent record | Consent |
| Comply with the law and defend claims | As needed | Legal obligation; legitimate interests |
Under UAE law, where we rely on something other than consent, we rely on the grounds the law allows, such as performing a contract or meeting a legal obligation.
4. Who we share it with
We use these service providers, who handle information for us under contract:
| Service | What it does for us | Where |
|---|---|---|
| Supabase | Database, sign-in, server functions | Ireland (AWS eu-west-1) |
| Render | Website hosting | Singapore |
| Lovable, through Cloudflare | Hosting for the current Terminal | Cloudflare's global network |
| Stripe | Payments | The United States and other countries where it operates |
| Circle | The community platform and its checkout | The United States and other countries where it operates |
| Resend | Transactional email from mail.nobscrypto.com.au | The United States and other countries where it operates |
| Google Workspace | Team email | The United States and other countries where it operates |
| OpenRouter, and the AI model providers it routes to | AI answers | The United States and other countries where they operate |
| Perplexity | Web search for Deep Research | The United States and other countries where it operates |
| GoDaddy | Domain name services | The United States and other countries where it operates |
Market-data providers, such as CoinGecko, LunarCrush, Token Terminal, Tokenomist, DefiLlama, FRED and OECD, get no personal information from us.
AI tools. When an AI tool answers you, your prompt and the context it needs go to OpenRouter and the model provider, and to Perplexity for Deep Research. Each provider handles prompts under its own terms, which may include keeping them for a limited time. Please don't include personal or sensitive information in prompts.
We share a partner-route UID with the relevant exchange only to check your application. We may also share information with authorities where the law requires it, or with a buyer of our business, who must protect it the same way.
We don't sell personal information.
5. International transfers
Your information leaves the UAE and your own country. For example, it goes to Ireland for our database, to Singapore for web hosting, and to the other places listed above. We protect transfers by:
- choosing established providers with published security and data-protection commitments;
- using their data processing terms, which for EU and UK information include the European Commission's standard contractual clauses or the UK's transfer addendum, where the provider offers them;
- for Australian information, taking reasonable steps so that overseas recipients handle it in line with the Australian Privacy Principles.
6. How long we keep it
- Your account and Terminal data (portfolios, settings, AI history): while your account is open, or until you delete them.
- Payment, wallet and subscription records: as long as tax and accounting law requires, usually up to 7 years.
- Consent records (cookies, marketing, acceptance of these terms): as long as we need to show that we had your consent.
- Security logs and request logs: for a limited period, for security and troubleshooting.
- Partner-route records, messages and complaints: as long as we need them to handle the matter and any follow-up.
- Referral records: as long as we need them to credit the referral and handle any follow-up.
When we no longer need information, we delete it or make it anonymous.
7. Deleting your account
You can delete your account in settings. That cancels your subscriptions and removes your login. You can also ask us to delete the rest of your personal information, and we will, except for what section 6 says we must keep.
8. Your rights
Depending on where you live, you can ask us to:
- give you access to your information, and a copy;
- correct it;
- delete it;
- restrict or object to some uses, including any use based on legitimate interests;
- give you your information in a portable format.
You can also withdraw consent at any time. That doesn't affect what we did before. And you have the right not to be subject to a decision based only on automated processing that significantly affects you.
How to use them. Email support@nobscrypto.com.au. We may need to confirm who you are. We reply within 30 days, or tell you if we need longer and why, within the time the law allows. Using your rights is free unless a request is plainly excessive.
9. Automated decisions
We check partner-route eligibility automatically, by reading your UID and deposit status through the exchange's partner systems. If the check fails, a person reviews it on request. We decide your Terminal access automatically from your plan and your Circle membership status. None of these decisions has legal effects, and none decides credit, employment or anything similar.
For Australian residents: the personal information these programs use is your email, community tier, membership status, plan status, and your partner-route UID and deposit status. The decisions they make are about access to our services.
The AI tools don't make decisions about you. They answer your questions.
10. EU and UK residents
The GDPR or the UK GDPR applies because we offer services to people in the EU and the UK. Our bases for using your information are in section 3. You can complain to your local data protection authority. In the UK, that is the Information Commissioner's Office.
11. Australian residents
We handle your information in line with the Australian Privacy Principles. You can ask for access or correction at support@nobscrypto.com.au. If you're unhappy with our response, you can complain to the Office of the Australian Information Commissioner (OAIC). Overseas recipients are listed in section 4. You may use a pseudonym in the community where that's practical, but we need a real email address to run your account.
12. UAE residents
You can contact the UAE Data Office about how we handle your information.
13. Security and breaches
We use encryption in transit, access controls, passwordless sign-in and logging. If a breach is likely to harm you, we tell you and the regulators, as the law requires.
14. Children
Our services are for people aged 18 and over. We don't knowingly collect information from children.
15. Cookies
See /legal/cookies.
16. Changes
We post updates here with a new version, and email you about significant changes.