Privacy Policy.

This policy explains how GJL Digital Investments, LLC, a Wyoming limited liability company trading as Blockchain IQ, handles personal information collected through www.blockchainiq.co and the client portal.

Only five things, and you give us four of them directly:

• Account information. Your email address, your name, and a password. The password is hashed by our authentication provider — it is never stored in a form we or anyone else can read.
• Purchase information. What you bought, the amount, the currency, and whether it has been paid. Stripe holds the payment method itself.
• Anything you write to us. Support emails and whatever they contain.
• Your name and address, if you ask for updates. The box at the foot of some pages takes your name and email and records which page you typed them on — so we can address you properly. That is the whole record: no account, no password. Section 7 covers it, including how to come off the list.
• Ordinary server logs. Our host records requests to the site — IP address, timestamp, page, browser — as every web server does. We use these for security and debugging, not to build a profile of you.

This section is short on most sites. Ours is worth reading, because the absences are deliberate:

• No analytics. No Google Analytics, no product analytics, no session recording, no heatmaps.
• No advertising or tracking pixels. No ad networks, no retargeting, no social media trackers, no third-party cookies of any kind.
• No card details. Payment forms are served by Stripe. Your card number never touches our servers.
• No fonts phoning home. Our typefaces are bundled with the site at build time, so loading a page doesn’t tell any font provider you were here.
• No wallet addresses or holdings. We publish research. We don’t ask what you own and we have no way to see it.

To create and secure your account, to deliver and give you access to what you bought, to take payment and issue refunds, to answer you when you write to us, to send you the updates you asked for if you asked for them, to keep required accounting and tax records, and to protect the service against fraud and abuse.

Where the GDPR or UK GDPR applies to you, our lawful bases are performance of a contract (running your account and fulfilling your order), legal obligation (tax and accounting records), legitimate interests (security, debugging, and preventing abuse), and consent (the updates list, which you can withdraw at any time without affecting anything else).

We do not use your information to make automated decisions that produce legal or similarly significant effects about you.

We use a small number of service providers. They process data on our instructions, and none of them is permitted to use it for their own purposes.

Beyond these, we disclose personal information only if the law requires it, or if we ever sell or merge the business — in which case the buyer would be bound by this policy and we would tell you first.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We never have, and we have no plans to.

We set cookies for one purpose: keeping you logged in. They are strictly necessary for the portal to work, so there is no consent banner to click past — there is nothing optional to consent to.

You can clear them in your browser at any time. Doing so signs you out.

Some pages carry a box asking for your name and email so we can send new research and what we’re watching, and address you properly. It is separate from having an account: signing up for updates doesn’t create one, and having an account doesn’t put you on the list.

We store your name, your address, and the page you signed up from — the last only so we can tell which writing people actually respond to. It goes into our own database first and our customer records in Zoho second. There is no profile beyond that, and no tracking of whether you opened anything.

To come off the list, email help@blockchainiq.co — or use the unsubscribe link in any update we send. We delete the record outright rather than marking it inactive, so nothing of yours is left behind. You don’t have to give a reason, and it has no effect on a subscription if you have one.

We keep your account information for as long as your account is open. If you close it, we delete your account and profile data within 90 days.

Invoices and payment records are the exception: we keep those for seven years, because tax and accounting rules require it. Support correspondence is kept for two years.

An address on the updates list is kept until you ask to come off it, and then deleted. There is no fixed expiry, because the list is only useful while you want to be on it.

Wherever you live, you can ask us to show you what we hold about you, correct it, delete it, or send you a copy in a portable format. If you are in the EU or UK you can also object to or restrict certain processing, and you have the right to complain to your local data protection authority. If you are in California, you have rights of access, deletion, correction, and to know what we disclose — and we will never discriminate against you for exercising them.

To use any of these, email help@blockchainiq.co from the address on your account. We will respond within 30 days. There is no charge, and you do not have to give a reason.

One honest caveat: we cannot delete records we are legally required to keep, such as paid invoices within the seven-year window described above. Everything else goes.

Traffic to the site is encrypted in transit. Passwords are hashed, never stored in readable form. Access to production systems is limited to people who need it. Payment details are handled entirely by Stripe, a PCI-DSS Level 1 provider.

No system is perfectly secure, and we won’t claim otherwise. If a breach ever affects your personal information, we will tell you and the relevant regulator as promptly as the law requires.

We are based in the United States and our providers process data there. If you are outside the US, using the service means your information is transferred to and processed in the United States, where privacy law differs from your own. Where required, our providers rely on Standard Contractual Clauses for these transfers.

Blockchain IQ is for adults. The service is not directed at anyone under 18 and we don’t knowingly collect information from them. If you believe a child has given us information, write to us and we will delete it.

If we change this policy we will update the effective date at the top, and for material changes we will email account holders before the change takes effect. If we ever start collecting something new — analytics, say — it will be stated here plainly, not buried in a redefinition.

Privacy questions, data requests, or anything you want explained: help@blockchainiq.co.

See also our terms of service and refund policy.

GJL Digital Investments, LLC · a Wyoming limited liability company