Privacy Policy
Last updated: April 7, 2025
HYVI LDA ("we", "us", "our") is committed to the protection of your
personal data and respects your privacy across all its websites on the
blockunity.io domain.
This Privacy Policy explains how we collect, use, store and protect your
personal data in accordance with the General Data Protection Regulation
(EU) 2016/679 ("GDPR") and applicable Portuguese data protection law
(Lei n. 58/2019).
Data Controller
The data controller responsible for processing your personal data is:
What Personal Data We Collect
We may collect and process the following categories of personal data:
-
Account information: Name, email address, username, and
password hash when you create an account.
-
Payment information: Billing details processed through
our payment provider (Stripe). We do not store your full credit card
number.
-
Usage data: Pages visited, features used, interaction
patterns, and preferences on our platform.
-
Technical data: IP address, device ID, browser type,
operating system, and access timestamps.
-
Communication data: Messages sent through our support
channels.
How and Why We Use Your Data
We process your personal data based on the following legal grounds under
GDPR Article 6:
| Purpose |
Legal Basis |
| Providing and maintaining our services |
Performance of contract |
| Processing payments and subscriptions |
Performance of contract |
| Sending service-related communications |
Legitimate interest |
| Improving our platform and user experience |
Legitimate interest |
| Analytics and usage statistics |
Consent |
| Ensuring platform security and preventing fraud |
Legitimate interest |
| Complying with legal obligations |
Legal obligation |
Data Retention
We retain your personal data only for as long as necessary to fulfill the
purposes for which it was collected:
-
Account data: Retained for the duration of your account
and up to 12 months after deletion, unless a longer period is required
by law.
-
Payment records: Retained for the period required by
applicable tax and accounting laws (typically 7 years).
-
Usage and analytics data: Retained in anonymized form
for the duration of your account.
-
Server logs (IP addresses): Retained for the duration of your account up to 12
months for security purposes.
Data Sharing and Third Parties
We do not sell your personal data. We may share your data with the
following categories of third parties, only to the extent necessary:
-
Payment processor: Stripe, for processing subscription
payments. Stripe acts as an independent data controller. See
Stripe's Privacy Policy.
-
Hosting and infrastructure: Cloud service providers
located within the EU/EEA.
-
Analytics: Anonymized usage data may be processed for
analytics purposes.
-
Third-party content: Some pages display content from
TradingView. Their own privacy policy applies. See
TradingView's Privacy Policy.
Data Security
We implement appropriate technical and organizational measures to protect
your personal data against unauthorized access, alteration, disclosure, or
destruction. These measures include encryption, access controls, and
regular security reviews.
International Data Transfers
Your personal data is primarily stored and processed within the European
Economic Area (EEA). If any data is transferred outside the EEA, we
ensure appropriate safeguards are in place in accordance with GDPR Chapter
V, such as Standard Contractual Clauses (SCCs).
Your Rights
Under the GDPR, you have the following rights regarding your personal
data:
- Right of access: Obtain a copy of the personal data we hold about you.
- Right to rectification: Request correction of inaccurate or incomplete data.
- Right to erasure: Request deletion of your personal data ("right to be forgotten").
- Right to restriction: Request that we restrict the processing of your data.
- Right to data portability: Receive your data in a structured, machine-readable format.
- Right to object: Object to processing based on legitimate interest.
- Right to withdraw consent: Withdraw consent at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, please contact us at
[email protected].
We will respond to your request within 30 days.
You also have the right to lodge a complaint with a supervisory authority.
For Portugal, this is the Comissao Nacional de Protecao de Dados (CNPD):
www.cnpd.pt.
Cookies
Our website uses cookies to provide essential functionality and improve
your experience. For detailed information about the cookies we use, please
see our Cookies Policy.
Blockunity Business API
If you use the Blockunity Business API service, additional data processing
practices apply. Please refer to our
API Privacy Addendum for
details on data collected through the API, including API usage logs,
credit transactions, and organization data.
Changes to This Policy
We may update this Privacy Policy from time to time. The updated date at
the top of this page indicates when the policy was last revised. We
encourage you to review this page periodically.
Contact Us
If you have any questions about this Privacy Policy or wish to exercise
your data protection rights, please contact us at:
[email protected].