Privacy Policy

1. Who We Are

When Moon 589 ("we," "us," or "our") is operated by Pro Sulum LLC, a company based in Fresno County, California, United States. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at whenmoon589.com (the "Site").

2. Information We Collect

Information You Provide

• Email address — when you subscribe to our newsletter, set a price alert, or use our AI-powered analysis tools.
• Coin preferences — which ISO 20022 coins you express interest in through our tools.
• Price alert settings — target prices and direction preferences you configure.

Information Collected Automatically

• Usage data — pages visited, tools used, and interactions with the Site, collected via privacy-focused analytics (Umami). This data is anonymous and does not include personal identifiers.
• IP address — used solely for rate limiting to prevent abuse. We do not store IP addresses in our database or associate them with your account.
• Cookies — see Section 5 below.

Information We Do Not Collect

We do not collect financial information, crypto wallet addresses, payment card numbers, Social Security numbers, government IDs, or any financial account credentials.

3. How We Use Your Information

• To deliver our newsletter and market updates (the "589 Brief").
• To send price alert notifications when your target is reached.
• To generate personalized AI analysis of calculator results you request.
• To improve Site performance, features, and user experience.
• To prevent abuse through rate limiting.

We will never sell, rent, or trade your personal information to third parties for marketing purposes.

4. AI-Generated Content

Some features on this Site use artificial intelligence (via third-party AI models through OpenRouter) to generate analysis and commentary. When you use these features:

• We send only the numeric calculation data you provided (prices, market caps) to the AI service. We do not send your email address or personal information.
• AI-generated responses are cached for up to 24 hours to reduce costs and improve speed. Cached responses may be served to other users who run the same calculation.
• AI-generated content is not financial advice. See our Terms of Service for full disclaimers.

5. Cookies

We use the following cookies:

You can manage your cookie preferences at any time using the "Cookie Settings" link in our footer. You can also clear cookies through your browser settings.

6. Third-Party Services

We use the following third-party services:

• CoinGecko API — to retrieve live cryptocurrency price data. No personal data is shared.
• OpenRouter / Anthropic — to generate AI analysis. Only numeric calculation parameters are shared; no personal data.
• Resend — to deliver transactional emails (newsletter, price alerts). Your email address is shared with Resend solely for email delivery.
• Umami — self-hosted, privacy-focused analytics. No personal data is collected. Compliant with GDPR without requiring consent (but we ask anyway).

We maintain appropriate data processing agreements with all third-party service providers that handle personal data on our behalf.

7. Data Retention

• Subscriber data — retained until you unsubscribe. Upon unsubscribing, your status is set to "unsubscribed" and your email is retained for suppression purposes only.
• Price alerts — retained until triggered or until you unsubscribe.
• AI analysis cache — automatically purged after 24 hours.
• Rate limit data — stored in memory only, cleared every 5 minutes.

8. Your Rights

Depending on your jurisdiction, you may have the following rights:

• Access — request a copy of the personal data we hold about you.
• Deletion — request deletion of your personal data.
• Correction — request correction of inaccurate data.
• Portability — receive your data in a machine-readable format (CSV or JSON).
• Opt-out — unsubscribe from emails at any time using the link in every email we send.
• Cookie control — manage cookie preferences via the footer link or your browser settings.

We will respond to all data rights requests within 30 days of receipt. To exercise any of these rights, contact us at the email in Section 14.

California Residents (CCPA/CPRA)

Under the California Consumer Privacy Act (as amended by CPRA), California residents have the right to know what personal information is collected, request its deletion, and opt out of its sale or sharing.

We do not sell or share your personal information. We have never sold personal information and have no plans to do so. The categories of personal information we collect are: identifiers (email address) and internet activity information (pages visited, tools used — collected anonymously). This information is collected directly from you and is used solely for the business purposes described in Section 3.

To exercise your CCPA rights (including via an authorized agent), contact us at the email in Section 14.

EEA/UK Residents (GDPR)

If you are located in the European Economic Area or United Kingdom, we process your data based on your consent (which you can withdraw at any time) and our legitimate interest in operating the Site. You have the right to lodge a complaint with your local data protection authority.

9. Data Security

We implement appropriate technical and organizational measures to protect your data, including encrypted connections (HTTPS/TLS), secure server infrastructure, rate limiting, input validation, and output sanitization of AI-generated content. However, no method of transmission over the Internet is 100% secure.

10. International Data Transfers

Your data is processed on servers located in the United States. If you are accessing the Site from outside the United States, your information will be transferred to, stored, and processed in the US. We rely on standard contractual clauses and other appropriate safeguards where required by applicable law.

11. Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected users via email within 72 hours of becoming aware of the breach, and will notify the relevant supervisory authority where required by law. The notification will describe the nature of the breach, the data involved, and the steps we are taking in response.

12. Children's Privacy

This Site is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Your continued use of the Site after changes constitutes acceptance of the revised policy.

14. Contact Us

For privacy-related inquiries, data requests, or questions about this policy:

Pro Sulum LLC
31000 Lynx Lane, Prather, CA 93651
Email: privacy@whenmoon589.com