Privacy Policy

This Privacy Policy explains how Crypto Melodies LLC ("Phosphor X," "we," "us") collects, uses, and shares information when you use Phosphor X (the "Service"). By using the Service, you agree to this Policy.

1. Information we collect

• Account information — your name, email, and login credentials (passwords are stored only as salted hashes), plus, if you use Google sign-in, basic profile information from Google.
• Subscription & billing — plan, status, and limited billing metadata (amounts, subscription and customer identifiers) from our payment processor, Stripe. We do not store full card numbers.
• Usage & device data — log data, IP address, browser/user-agent, pages viewed, and features used, including the agreement-acceptance records we keep when you sign our Terms, Privacy Policy, and Risk Disclosure: the legal name you type as your electronic signature, your IP address, your browser identifier, the date and time, and the document versions. We use this to operate, secure, and improve the Service, and retain acceptance records for as long as needed to evidence your agreement, including in payment disputes.
• Broker connections — if you connect a brokerage account (currently through TradeLocker), the credentials and account identifiers needed to display your account and, where you enable it, route trades you have authorized. Because TradeLocker does not offer a delegated sign-in (OAuth), your TradeLocker credentials are stored encrypted (AES-256-GCM), used only to sign in to your own account, and wiped when you disconnect. You can disconnect at any time.
• Prospect / waitlist data — name, email, and how you heard about us, if you join the waitlist.
• Referral data — if you arrive through a member's referral link, we record the referring member so referrals can be attributed.
• Communications — messages you send us, including support requests.

2. How we use information

• Provide, operate, secure, and improve the Service.
• Process subscriptions and, where applicable, referral payouts.
• Send transactional email (through Resend) — account, billing, and security messages, and, if you opt in, product updates.
• Maintain security, audit, and agreement-acceptance records (logins, password resets, account changes, and the versions of the agreements you accepted).
• Determine eligibility and availability, and support sanctions and regulatory compliance — including using country and IP/geolocation information to apply geographic restrictions and to restrict access where a jurisdiction, person, or payment presents a compliance concern.
• Comply with legal obligations and enforce our Terms.

3. How we share information

We do not sell your personal information. We share it only with:

• Service providers that operate the Service on our behalf — for example Stripe (payments), Resend (email), brokerage connectivity and market-data providers, hosting/infrastructure, and analytics — under appropriate terms and only as needed.
• Legal / safety — to comply with law, enforce our agreements, or protect rights, safety, and the integrity of the Service.
• Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this Policy.

4. Cookies & local storage

We use cookies and similar technologies — including an authentication cookie to keep you signed in, and cookies for preferences, referral attribution, and analytics (we use Google Analytics). Our own first-party pageview counter is cookieless. You can control cookies through your browser; blocking the authentication cookie will prevent sign-in.

5. Data security & retention

We use reasonable administrative, technical, and physical safeguards, including encryption in transit and salted password hashing. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security. We retain information for as long as your account is active and as needed to provide the Service and to meet legal, tax, audit, and dispute-resolution obligations — including keeping agreement-acceptance and billing records as evidence of the agreements you entered into — then delete or de-identify it.

6. Your rights

Depending on where you live, you may have rights to access, correct, delete, or port your data, or to object to or restrict certain processing. California residents (CCPA/CPRA) may request access or deletion and are entitled to non-discrimination; we do not sell personal information. To exercise these rights, contact us below.

7. Children

The Service is not directed to anyone under 18, and we do not knowingly collect their information.

8. International users

Phosphor X is operated from the United States. If you use the Service from elsewhere, you understand and consent that your information may be processed in the United States.

9. Changes & contact

We may update this Policy on reasonable notice; material changes will be posted here with a new version and effective date. Privacy questions or requests: [email protected] · Crypto Melodies LLC (Wyoming).