Privacy policy

Last updated: October 15, 2026

1. Controller

The controller responsible for processing personal data on goldswap.info and in the GoldSwap.Info software is:

For privacy questions, contact us at mail(at)goldswap.info.

2. Hosting and server log files

The website and the software run on servers of IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany, in a data centre in Germany. IONOS processes this data on our behalf (Art. 28 GDPR).

When you visit the website, the server automatically records: IP address, date and time, requested address, referrer, browser and operating system. This is needed to deliver the pages and for security (e.g. to fend off attacks). The legal basis is our legitimate interest (Art. 6(1)(f) GDPR). The log files are deleted automatically after 14 days.

3. Cookies and consent

We set strictly necessary cookies without consent, because the website does not work without them:

• ci_session – session, login and shopping cart; deleted when you close the browser.
• gs_consent – stores your cookie choice; 180 days.

All other services (statistics, marketing) are loaded only after you have consented in the cookie banner (Art. 6(1)(a) GDPR and the applicable ePrivacy rules). You can withdraw your consent at any time via the “Cookie settings” link in the website footer; statistics and marketing cookies already set are removed.

4. Google Analytics (only with consent)

With your consent we use Google Analytics 4 provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics analyses how our website is used (e.g. pages viewed, time on page, device, approximate location). It sets the cookies _ga and _ga_* (lifetime up to 2 years). Data may be transferred to Google LLC in the USA; Google is certified under the EU-US Data Privacy Framework, and standard contractual clauses also apply. Legal basis: Art. 6(1)(a) GDPR.

5. Customer account and use of the software

To register and use GoldSwap.Info we process your name, email address, password (stored encrypted), chosen plan, invoice and payment status and usage data of your account. The legal basis is the performance of the contract (Art. 6(1)(b) GDPR). We keep this data as long as your account exists; afterwards it is deleted unless statutory retention periods apply (e.g. up to 7 years for invoices).

6. Connecting Facebook and Instagram (Meta)

When you connect your Facebook account, we receive through the official API of Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland, only the data you grant permission for in the login dialog: your name and Facebook ID, the list of your pages and connected Instagram business accounts, and access tokens that let us publish posts, reply to comments and messages, retrieve statistics and run Messenger bots on your behalf.

In doing so we also process data of people who interact with your pages (e.g. name, profile picture, page-scoped ID, messages and comments). You, as the page owner, are the controller of this data; we process it as a processor on your instructions. We will sign a data processing agreement with you on request.

You can disconnect at any time: in GoldSwap.Info or in your Facebook settings under “Apps and websites”. If you remove the app there, we automatically delete the data received from Meta. More information: Data deletion and your rights.

7. Payments

Paid plans are processed by PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg, or Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Dublin 2, Ireland. You enter your payment details directly with the payment provider; we only receive the payment status, amount and a transaction ID. Legal basis: Art. 6(1)(b) GDPR.

8. Email, SMS and other integrations

• Email delivery (system emails such as registration and password, contact form) via the mail server of one.com.
• SMS that you send through the software are delivered by Twilio Ireland Limited, 25-28 North Wall Quay, Dublin 1, Ireland; data may be transferred to Twilio Inc. in the USA (Data Privacy Framework, standard contractual clauses).
• AI replies: if you enable “AI Reply”, the text of incoming messages is sent to OpenAI Ireland Limited, 1st Floor, The Liffey Trust Centre, 117-126 Sheriff Street Upper, Dublin 1, Ireland, to generate a suggested reply; processing in the USA is possible.
• Optional integrations such as Mailchimp, WooCommerce, WordPress or Google Sheets are used only if you connect them to your account yourself. The provider's privacy policy then applies as well.

9. Contact form and email

When you write to us, we process your email address, subject and message to answer your request (Art. 6(1)(b) or (f) GDPR). The data is deleted once the request is settled and no retention obligations apply.

10. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). You can withdraw consent at any time with effect for the future (Art. 7(3)). Write to mail(at)goldswap.info.

You may lodge a complaint with a data protection supervisory authority, in particular in the EU country where you live. Our competent authority is the Estonian Data Protection Inspectorate: Andmekaitse Inspektsioon, Tatari 39, 10134 Tallinn, Estonia, www.aki.ee.

11. Security

The connection to the website is encrypted with TLS. We store passwords only as a hash. Access to customer data is limited to the people who need it for operations and support.

12. No automated decision-making

We do not make decisions based solely on automated processing that produce legal effects for you (Art. 22 GDPR).

13. Changes

We update this privacy policy when our services or the law change. The version published on this page applies.