Privacy Policy

1. Who we are

TailWhales (tailwhales.com) is the data controller for the personal information described here. For privacy requests, contact privacy@tailwhales.com.

2. What we collect

• Account data — your email address and authentication identifiers, handled by our auth provider (Clerk). We do not store your password.
• Billing data — subscription status and a Stripe customer ID. We never see or store your full card number— card data is collected and processed directly by Stripe (a PCI-DSS Level 1 provider).
• Product data — your watchlists, alert settings, and in-app preferences.
• Technical data — IP-derived country (used only for regional availability), device/browser info, and error/diagnostic logs needed to run the service securely.

We do not ask for, take custody of, or store your wallet private keys, exchange credentials, or funds.

3. Why we use it

• to provide and secure the service and your account;
• to process subscriptions and prevent fraud;
• to send service and (if you opt in) alert communications;
• to comply with legal obligations and enforce our Terms.

Legal bases (GDPR): performance of a contract, our legitimate interests in running and securing the service, your consent (for optional communications), and legal compliance.

4. Sub-processors we share with

We share the minimum necessary data with vetted providers who process it on our behalf under data-processing agreements. These currently may include:

• Clerk — authentication & account management
• Stripe — payment processing & subscription billing
• Resend — transactional & alert email
• Twilio — SMS alerts (higher-tier plans only, if enabled)
• Hosting/infrastructure (e.g. Railway) and error monitoring (e.g. Sentry)

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

5. Cookies

TailWhales uses only strictly necessary cookies — primarily the session/authentication cookies set by Clerk that keep you signed in, and cookies Stripe uses during checkout. These are required for the service to function, so no consent banner is shown. We do not currently use analytics or advertising cookies. If that changes, we will update this policy and request consent where required.

6. Retention

We keep account and billing data for as long as your account is active and as required for legal, tax, and accounting purposes, then delete or anonymize it. Diagnostic logs are kept for a limited period.

7. Your rights

Depending on where you live (EEA/UK GDPR, California CCPA/CPRA, and similar laws), you may have the right to access, correct, delete, or port your data, to object to or restrict processing, to withdraw consent, and to opt out of any sale/sharing (we do neither). To exercise any right, email privacy@tailwhales.com; we will respond within the timeframe the law requires. You may also lodge a complaint with your local data-protection authority.

8. International transfers & security

Your data may be processed in the United States and other countries where our providers operate, under appropriate safeguards. We use encryption in transit, access controls, and reputable processors to protect your data, though no method is 100% secure.

9. Children

The service is not intended for anyone under 18, and we do not knowingly collect data from children.

10. Changes & contact

We will update this policy as needed and revise the “Last updated” date. Questions or requests: privacy@tailwhales.com.