Privacy Policy
Protocol is privacy-first. The data controller is Protocol Nexus Limited (Company No. 81290470), Rm 1007, 10/F, Sterling Centre, No. 11 Cheung Yue Street, Lai Chi Kok, Hong Kong. We operate a low-PII model: charts are computed from space-time coordinates, not from your identity. This policy explains what we collect and your rights under the Hong Kong PDPO, Thailand's PDPA, the GDPR and the CCPA.
1. What we collect
Account data (email for login), chart inputs (birth date, time, and location coordinates), a pseudonymous alias, and usage/diagnostic data. We do not require real names to generate reports.
2. How we use it
To operate your account, compute the reports you request, process payments, prevent abuse, and improve the service. We do not use chart data for advertising.
3. Payments
Card and payment details are collected and stored by Gumroad, which handles our card payments, and by the banks that process PromptPay — not by Protocol. We receive only the information needed to credit your account and support you.
4. Cookies
We use essential cookies for sign-in and preferences (such as language). We do not sell cookie data.
5. Sharing
We never sell your data. We share only with processors that run the service (hosting, database, payments) under data-protection agreements, or when required by law.
6. Retention
We keep account and chart data while your account is active. Deleting your account removes associated personal data, subject to records we must keep for legal or accounting reasons.
7. Your rights
You can access, correct, export, or delete your data — account deletion is available in one click in your settings. To exercise other rights, contact privacy@protocol.top.
8. Security & contact
We use industry-standard encryption in transit and at rest and restrict internal access. Data may be processed outside your country under appropriate safeguards. Questions: privacy@protocol.top.