Privacy Policy

Last updated: March 1, 2026

1. Data Controller

AssetLens is operated from Switzerland. For the purposes of the EU General Data Protection Regulation (GDPR), the Swiss Federal Act on Data Protection (nDSG), and the California Consumer Privacy Act (CCPA), we act as the data controller for the personal data described in this policy.

Contact: info@assetlens.ai

2. Data We Collect

Account Data

When you create an account, we collect your email address and authentication credentials (password hash or OAuth provider token). If you sign in via Google or GitHub, we receive your name and email from those providers.

Usage Data

We collect information about your interactions with the Service, including assets viewed, forecasts generated, and favorited assets. This data is stored in our database and linked to your user account.

Technical Data

Our hosting provider (Vercel) automatically collects IP addresses, browser type, operating system, and request metadata for security and performance purposes.

3. Purposes & Legal Basis

We process your personal data for the following purposes:

  • Account management — to create and maintain your account (legal basis: contract performance)
  • Forecast generation — to generate and store AI-powered forecasts you request (legal basis: contract performance)
  • Rate limiting — to prevent abuse by tracking request counts per user (legal basis: legitimate interest)
  • Security — to detect and prevent fraud, abuse, and unauthorized access (legal basis: legitimate interest)

4. Cookie Policy

AssetLens uses only essential cookies required for the Service to function:

  • Authentication cookies — managed by Supabase to maintain your login session
  • Cookie consent preference — stored in localStorage to remember your cookie choice

We do not currently use analytics, advertising, or tracking cookies. If we introduce analytics cookies in the future, we will obtain your explicit consent before setting them.

5. Data Retention

Account data is retained for as long as your account is active. Forecasts are retained for their validity period and may be cached to improve Service performance. You may request deletion of your account and associated data at any time.

6. Your Rights

Under GDPR (EU/EEA residents)

You have the right to:

  • Access your personal data
  • Rectify inaccurate data
  • Erase your data ("right to be forgotten")
  • Restrict or object to processing
  • Data portability
  • Lodge a complaint with your local supervisory authority

Under nDSG (Swiss residents)

You have the right to access, rectify, and request deletion of your personal data. You may lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC).

Under CCPA (California residents)

You have the right to:

  • Know what personal information we collect and how it is used
  • Request deletion of your personal information
  • Opt out of the sale of personal information (we do not sell your data)
  • Non-discrimination for exercising your rights

To exercise any of these rights, contact us at info@assetlens.ai.

7. International Data Transfers

Your data may be transferred to and processed in countries outside your country of residence, including the United States (where our hosting provider Vercel operates). We ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) where required by GDPR.

8. Third-Party Services

We share data with the following third-party services as necessary to operate the Service:

  • Supabase — database and authentication
  • Vercel — hosting and edge network
  • LLM providers (Google Gemini, Anthropic Claude, OpenAI ChatGPT, xAI Grok) — asset data is sent to generate forecasts; no personal data is included in prompts
  • Logo.dev — company and token logos
  • SEC EDGAR — public company data (no personal data sent)
  • CoinGecko — cryptocurrency market data (no personal data sent)

9. Automated Decision-Making

Our forecasts are generated by AI models and constitute automated processing. These forecasts are for informational purposes only and do not produce legal effects or similarly significant effects on you. No automated decisions are made regarding your account access or rights.

10. Children's Data

The Service is not directed at individuals under 18 years of age. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child under 18, we will take steps to delete it promptly.

11. "Do Not Sell My Personal Information"

AssetLens does not sell, rent, or trade your personal information to third parties for monetary or other valuable consideration. We do not participate in data broker services.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes via email or a notice on the Service. The "Last updated" date at the top of this page indicates when this policy was last revised.

13. Contact & Supervisory Authority

For privacy-related inquiries, contact us at info@assetlens.ai.

If you are located in the EU/EEA, you have the right to lodge a complaint with your local data protection supervisory authority. If you are in Switzerland, you may contact the Federal Data Protection and Information Commissioner (FDPIC).