← Back
GB
United Kingdom · HMRC

Privacy Policy

Last updated: April 2026

1. Data Controller

CryptAxly, accessible at cryptaxly.com, is the data controller for the personal data you provide. For any privacy-related queries, contact us at hello@cryptaxly.com.

2. Data We Collect

We collect the following data:

Registration data: email address and country of residence.
Payment data: handled entirely by Stripe. CryptAxly never stores credit or debit card details.
CSV files: transaction history files you upload are processed in memory and automatically deleted after your report is generated. They are never permanently stored on our servers.
Usage data: access logs, IP address, browser type, for security and diagnostic purposes.

3. Purpose and Legal Basis

We process your data for the following purposes:

Providing the contracted service — legal basis: contract performance.
Sending the tax report by email — legal basis: contract performance.
Compliance with legal obligations — legal basis: legal obligation.
Security and fraud prevention — legal basis: legitimate interest.

4. Data Retention

Account data is retained while your account is active. CSV files are deleted immediately after processing. Generated PDF reports are retained for 1 year to allow re-downloads, after which they are permanently deleted.

5. Your Rights

You have the right to access, rectify, erase, port, restrict, or object to the processing of your data. To exercise any of these rights, email hello@cryptaxly.com stating the right you wish to exercise.

6. International Transfers

We use technology providers based in the US (Stripe, Vercel, Supabase) that have standard contractual clauses approved by the European Commission or equivalent transfer mechanisms.

7. Security

We apply appropriate technical and organizational measures to protect your data, including in-transit encryption (TLS), at-rest encryption, and automatic deletion of files after processing.

8. Children

The service is not directed at persons under 16 years of age. We do not knowingly collect data from minors. If we detect that a minor has provided data, we will delete it immediately.

9. Changes to This Policy

We reserve the right to update this policy. We will notify you of any significant changes by email or via a prominent notice on the website.