Privacy Policy

1. Who is responsible

Bright Tape (brighttape.app) is run as a sole proprietorship based in Switzerland (“we”). Its owner is responsible for processing your personal data in connection with the service. The owner’s name and postal address are listed in the Imprint. Privacy questions: info@brighttape.app.

This notice follows the Swiss Federal Act on Data Protection (FADP) and, where it applies to you, the EU General Data Protection Regulation (GDPR). Our representative in the EU under Article 27 GDPR: [name and address of EU representative, to be appointed].

2. What we collect

The waiting list

When you join the waiting list, we store your email address, the time you joined and the version of the consent you gave. To limit abuse, we count signups per connection for one hour using a one-way hash of your IP address, which then expires. We use the list only to email you when memberships open.

Your account

When you create an account, we process your email address, your name and profile image if you sign in with Google, account identifiers and sign-in records such as time, IP address and browser details. Sign-in is provided by Clerk.

Membership and payments

We store your plan, membership status, renewal and end dates, the identifiers Stripe assigns to your customer record, subscription and payments, and a record of what you agreed to at checkout, meaning the terms version and the time. Stripe processes your payment details. We do not receive or store full card numbers.

Technical data

Our hosting provider records technical request data such as IP address, time, requested page and browser type so that we can operate and secure the service.

Messages

If you email us, we process your message and contact details to reply.

3. Why we use it

• To email you when memberships open, if you joined the waiting list. This is based on your consent (Art. 6(1)(a)), which you can withdraw at any time by emailing us.
• To create and run your account and provide the membership you bought. Under the GDPR, this is necessary to perform our contract with you (Art. 6(1)(b)).
• To take payments, keep accounting records and meet tax obligations (legal obligation, Art. 6(1)(c)).
• To keep the service secure, prevent fraud and misuse, and fix problems (legitimate interests, Art. 6(1)(f)).
• To send you messages about your account, membership, renewals and changes to our terms (contract and legitimate interests).

We do not sell your data, we do not use it for advertising, and we do not make decisions about you based solely on automated processing. Our forecasts are about Bitcoin prices, not about you.

4. Cookies

We only use cookies that are strictly necessary. Clerk sets cookies to keep you signed in, and Stripe uses cookies on its checkout and billing pages to process payments and prevent fraud. We do not use analytics or advertising cookies. If that changes, we will update this notice and ask for your consent where required.

5. Who receives it

• Clerk, Inc., United States: sign-in and user management.
• Stripe [contracting Stripe entity for Swiss accounts, e.g. Stripe Payments Europe, Limited, Ireland] and Stripe, Inc., United States: payments, subscriptions, the billing portal and fraud prevention. Stripe also processes some payment data as an independent controller under its own privacy policy.
• Upstash, Inc., United States: storage of the waiting list, in the database region EU, Frankfurt (fra1).
• Hosting provider: [provider and location, e.g. Vercel Inc., United States].
• Email provider: [support email provider].
• Professional advisers, and authorities where the law requires it.

Apart from Stripe’s own processing described above, these providers process personal data only on our instructions and under data processing agreements.

6. Transfers abroad

Some recipients process data outside Switzerland and the EU/EEA, mainly in the United States. Clerk is certified under the Swiss-U.S. and EU-U.S. Data Privacy Frameworks, which Switzerland and the EU recognise as providing adequate protection for certified companies. Where a recipient is not certified, we rely on standard contractual clauses recognised by the Swiss Federal Data Protection and Information Commissioner (FDPIC) and the European Commission.

Countries involved: the United States, Ireland and other EU/EEA countries where our providers operate. [check against final providers]

7. How long we keep it

• Waiting list: until we have sent the launch email and you have had the chance to sign up, and no longer than 12 months after you joined. We delete your entry sooner if you ask.
• Account data: while your account exists, then deleted within [period, e.g. 30 days] of account deletion, unless we must keep it longer.
• Payment and accounting records: 10 years, as Swiss accounting law requires.
• Checkout consent records: for as long as we may need to show what you agreed to, usually your membership plus [period].
• Server logs: [period, e.g. 30 days].

8. Your rights

You can ask for access to your personal data, for a copy in a common electronic format, and for correction or deletion. You can object to processing based on our legitimate interests, and where you gave consent, you can withdraw it at any time. Where the GDPR applies, you can also ask us to restrict processing.

To use these rights, email info@brighttape.app. We may need to confirm your identity. Some data we must keep, such as accounting records.

You can complain to the FDPIC in Switzerland or, if you live in the EU/EEA, to the data protection authority where you live.

9. Security

We use established providers, encrypted connections and access controls that limit who can reach personal data. Membership and payment identifiers are only readable on our servers.

10. Children

The service is not intended for anyone under 18, and we do not knowingly collect their data.

11. Changes

We update this notice when our processing changes. The date at the top shows the current version, and we will tell you about significant changes.