Privacy Notice
Effective June 8, 2026
1. Who we are
StartScale CxO LLC operates Coinpath (the "Service"). We are the data controller for personal data processed about you in connection with the Service. Our registered business address is 1201 West Peachtree Street NW, Suite 2300A PMB 1287, Atlanta, GA 30309, United States. You can contact us at privacy@coinpathapp.com.
2. What we collect and why
| Category | Examples | Purpose | Legal basis |
|---|---|---|---|
| Identity & contact | Name, email, profile photo | Create your account, authenticate you, send service messages | Contract performance |
| Account credentials | Hashed password, OAuth tokens (e.g. Google) | Authenticate you and secure your account | Contract performance |
| Financial data you submit | Account balances, transactions, budgets, goals, categories, notes | Provide the Service's core features | Contract performance |
| Household / sharing data | Members you invite, role assignments, shared views | Operate household-level features you opt into | Contract performance |
| Support communications | Messages you send us, feedback, bug reports | Respond to you and improve the Service | Legitimate interests |
| Usage & telemetry | Pages viewed, feature events, performance and error data | Operate, secure, and improve the Service | Legitimate interests |
| Device & connection | IP address, browser/user-agent, device identifiers | Security, fraud prevention, debugging | Legitimate interests / legal obligation |
Payment-related personal data (card details, billing address, tax IDs) is collected and processed by our reseller and Merchant of Record, Paddle.com Market Limited, under its own privacy notice. We receive only the limited information Paddle returns to us to fulfil the order (such as country and a customer reference).
3. Who we share data with
- Service providers (sub-processors) who help us run the Service, including hosting, database, authentication, email delivery, error monitoring, and analytics.
- Merchant of Record — Paddle.com Market Limited — for sale of subscriptions and one-time payments, subscription management, payment processing, tax compliance, and invoicing.
- Professional advisers (legal, accounting) when reasonably necessary.
- Authorities when required by law, regulation, court order, or to protect rights, property, or safety.
- A successor entity in a merger, acquisition, or sale of assets, subject to equivalent protections.
We do not sell your personal data.
4. International transfers
Personal data may be transferred to and stored in countries other than your own, including the United States and the United Kingdom. Where required, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or equivalent mechanisms.
5. Retention
We keep personal data only as long as needed to provide the Service and to meet legal, tax, accounting, or security obligations. When you delete your account, we delete or irreversibly anonymise your personal data within 30 days, except where retention is required by law (for example, financial records held by Paddle for tax purposes).
6. Your rights
Depending on where you live, you have the right to: access the personal data we hold about you; correct inaccurate data; request deletion; restrict or object to certain processing; data portability; withdraw consent at any time; and lodge a complaint with your local supervisory authority. If you are in the UK or EEA, we will respond to verified requests within one month. To exercise any of these rights, email privacy@coinpathapp.com or use the controls in your account settings.
7. Security
We use appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls, audit logging, and regular reviews. No system is perfectly secure; if we become aware of a breach affecting your personal data we will notify you and any relevant authority as required by law.
8. Cookies
We use a small number of cookies and similar technologies. Essential cookies keep you signed in and remember your preferences. Analytics cookies help us understand product usage in aggregate. We do not use advertising cookies. You can control non-essential cookies in your browser settings.
9. Children
The Service is not directed to children under 16. We do not knowingly collect personal data from children under 16; if you believe we have, contact us and we will delete it.
10. Changes
We may update this notice from time to time. Material changes will be notified in-app or by email. The "Effective" date above will always reflect the latest version.
11. Contact
StartScale CxO LLC · 1201 West Peachtree Street NW, Suite 2300A PMB 1287, Atlanta, GA 30309, USA · privacy@coinpathapp.com