Legal

Privacy Policy

Effective 1 September 2026. This explains what Crossly collects, why, and how you can delete it.

1. Who we are

Crossly is an independent technical-alert service. Contact: pav.kovalenko@gmail.com.

2. What we collect

• Account. Email address, and if you use Google sign-in, the name Google provides. We store a linked auth user id so your session maps to your alerts.
• Alerts. The pairs, timeframes, conditions, labels, channels, and cooldowns you save.
• Telegram. If you connect the bot, we store your Telegram chat id and whether notifications are enabled. Connecting is optional and happens only after you start the bot.
• Delivery logs. When an alert fires we record the channel, status, and a snapshot of what matched, so you can see history on Profile.
• Usage. Plan, active-alert counts, and monthly notification counts used to enforce limits.

We do not collect payment cards (there is no checkout yet). We do not sell your personal data. Public Binance market data is not personal data about you.

3. Why we collect it

We use this information to create your account, evaluate your alerts, send the Telegram and email notifications you turned on, show Profile history, and enforce plan limits. We do not use it for advertising.

4. Who processes it for us

• Supabase — authentication and database.
• Railway — application hosting.
• Google — optional sign-in.
• Resend — transactional alert emails to your account email.
• Telegram — messages to a chat you linked.
• Upstash / Redis — delivery queues and live-alert nudges.

Those providers process data on our behalf to run the product. They have their own terms. Market prices come from Binance public APIs; we do not send your identity to Binance.

5. Cookies and local storage

Crossly uses your browser to keep a Supabase auth session (tokens in local storage), not advertising cookies. There is no third-party ad tracker on these pages.

6. Email and Telegram

Alert emails and Telegram messages are transactional — you asked us to send them when conditions match. We do not send marketing mail from this flow. You can disable a channel per alert, unlink Telegram, or delete your account.

7. Retention and deletion

We keep account, alert, and delivery records while your account exists. On Profile you can delete your account. That permanently removes your account, alerts, delivery history, Telegram link, and login. Queued notifications already in flight may still send shortly afterwards. Backup copies held by our processors may take a short additional period to expire.

8. Your rights

Depending on where you live, you may have rights to access, correct, or delete personal data, or to object to certain processing. The fastest deletion path is Profile → Delete account. You can also email pav.kovalenko@gmail.com. If you signed in with Google, you can additionally revoke Crossly’s access in your Google account settings.

9. Children

Crossly is not directed at anyone under 18. We do not knowingly collect personal data from children.

10. International processing

Our hosts and processors may store data in the EU, the US, or other regions. If you use Crossly from elsewhere, you understand that your information is processed in those locations.

11. Changes

We may update this policy. The effective date at the top will change when we do. Material changes will be reflected on this page before they apply to data we already hold, where the law requires it.

12. Contact

Privacy questions: pav.kovalenko@gmail.com. Related: Terms of Service.