PAPACandle
Privacy Policy (GDPR)
Website and PAPA XAUUSD app privacy information under EU Regulation 2016/679.
Prepared 30 October 2026 · Legal draft
1. Scope and status
This draft covers the PAPACandle presentation website and the PAPA XAUUSD Android application. Before publication, it must be checked against the final app build, Android permissions, third-party SDKs, website hosting configuration and Google Play Data safety disclosures.
2. Data controller and contact
The public project name is PAPACandle. The actual data controller for the PAPACandle website and PAPA XAUUSD application is: Marco Giovanni Cedone (individual developer). Privacy contact: papacandle8@gmail.com. The PAPACandle brand does not replace the controller’s legal identity. Remaining privacy details must be verified before publication.
Inside the app, credits and terms may use the PAPACandle brand and a direct link to this complete privacy policy. The app must provide clear and easy access; a link alone does not replace any required privacy notice or disclosure.
3. Website browsing and language preferences
This static website contains no registration form and does not currently embed advertising, social trackers or third-party analytics scripts. It saves the preferred site language locally in browser storage. The hosting provider may process technical data (such as IP address, request time and browser information) to deliver the website and secure its systems; the provider and log-retention rules will be specified after hosting activation.
4. Application operation and local functions
PAPA XAUUSD receives indicative market information to render charts, indicators, structural descriptions and alerts. PAPA AI is a descriptive feature based on local app data, not a ChatGPT cloud conversation. Alert and display preferences may be saved on the device. The actual data flows, permissions and storage locations must be confirmed on the release build.
5. External services and recipients
BiQuote operates the external market-data service. When the service is contacted, BiQuote processes request metadata, including IP address, time, requested endpoint/symbol and user agent, under its own privacy terms. The website hosting provider may process server logs. If Google Play Billing is activated, payment and subscription transactions will be handled using Google Play services under the applicable Google terms. No claims are made here that subscriptions or analytics are already active.
6. Purposes and possible legal grounds
Technical logs may be processed to deliver and secure the website (legitimate interest in service security, subject to assessment). Messages sent voluntarily by email are used to reply to enquiries and provide support (steps requested by the user, contractual necessity where applicable, or legitimate interest). Service-related processing required for a future subscription may be based on performance of the contract and legal obligations. The definitive legal-basis mapping requires the release and hosting audit.
7. Storage and deletion
Browser language preference remains until the user clears website storage. App-local settings remain until removed by app controls, clearing data or uninstalling, depending on the actual implementation. The project keeps support communications only for the period needed to manage requests and legal obligations; exact schedules and hosting logs retention must be documented before launch.
8. GDPR rights
Under applicable conditions, you may request access, rectification, erasure, restriction, portability, object to processing and withdraw consent when consent is the legal basis. You may also complain to the competent supervisory authority, including the Italian Garante per la protezione dei dati personali. Send requests to papacandle8@gmail.com. Rights may be limited by legal exceptions and may need identity verification.
9. International transfers and safety
The locations and safeguards used by the future host, data provider and relevant Google services must be verified before release, including any transfers outside the European Economic Area. Data minimisation and reasonable security measures are design goals; a final security statement depends on the production configuration.
10. Updates, minors and legal references
This draft will be updated after the final data-processing audit. The app is aimed at people interested in market-analysis information and is not directed to children. The legal framework includes Regulation (EU) 2016/679, and the final policy must also satisfy Google Play requirements.
References / Riferimenti / Referencias
Regulation (EU) 2016/679 · Garante Privacy · BiQuote Privacy