Privacy Policy
Effective 2026-05-15. Last updated 2026-05-15.
1. What we collect
- Email address — required for account creation, sign-in, and transactional email
- Hashed password — argon2id hash only; we never store or log the plaintext
- Subscription metadata — tier, Lemon Squeezy customer/subscription IDs, billing period end (received from Lemon Squeezy webhooks)
- Memo read history — timestamps of when you accessed analyst memos (used to enforce Free-tier daily preview limit)
- Server access logs — IP address and User-Agent, retained 30 days for rate limiting and abuse detection only
2. What we do not collect
- Payment card details (handled entirely by Lemon Squeezy)
- Browsing activity outside
memescope.beyonder1.tech - Tracking cookies or third-party analytics
- Advertising identifiers
3. Sub-processors
Your data is shared with the following sub-processors only as needed to provide the Service:
- Lemon Squeezy Inc. (USA) — payment processing, invoicing, customer portal
- Hostinger International Ltd. (Lithuania / Malaysia DC) — VPS hosting and SMTP transactional email delivery
- Anthropic PBC (USA) — generates analyst memos from public coin metadata. No user PII is sent to Anthropic. Only token data (ticker, contract address, market data, public social mention counts) is included in prompts.
- DexScreener and CoinGecko (USA / Singapore) — read-only consumers of public market data. No user data sent.
4. Cookies
We use a single essential session cookie (HttpOnly, Secure, SameSite=Lax) to keep you signed in. We do not use analytics, advertising, or tracking cookies.
5. Your rights
- Access — request a copy of your account data by emailing us
- Export — we send a JSON export within 30 days of request
- Deletion — we hard-delete account data within 30 days. Note: Lemon Squeezy retains invoice records per their own retention policy for tax compliance
- Correction — update email or other details via account settings
6. Children
The Service is for users 18 and older. We do not knowingly collect data from minors.
7. Retention
Account data is kept while your account exists and deleted within 30 days of an account-deletion request. Server access logs are auto-pruned at 30 days. Lemon Squeezy invoices follow their retention policy.
8. Cross-border transfers
Our VPS is hosted in Kuala Lumpur, Malaysia (Hostinger International Ltd., AS47583). Data may transit between jurisdictions as required by sub-processor infrastructure (Lemon Squeezy: USA; Anthropic: USA; CoinGecko / DexScreener: USA / Singapore).
9. Security
Data in transit uses TLS 1.3. Passwords are stored as argon2id hashes. Our VPS uses a firewall (UFW) restricting traffic to ports 22/80/443. We apply security updates regularly. No system is ever 100% secure; we recommend you use a unique password and enable browser-level security features.
10. Changes to this policy
Material changes will be announced by email and on-site banner at least 30 days before taking effect.
11. Contact
Questions or requests: fajri.illahi1211@gmail.com.