Privacy
What personal data we collect, why, who else receives it, and your rights. Version of 16 October 2026.
1. Who is responsible
The controller of your personal data is Abaco, Italy. Write to abaco@phisys.app for anything about your data; on request we give you the full details of the person responsible.
2. What we collect, and why
- Email address: to send the monthly report you ask for, with our studies and news on Abaco tools, after you confirm it from the email we send (your consent; you can unsubscribe from any email in one click), to give you access to our TradingView scripts, and to deliver your licence (contract).
- TradingView username: to add you to the invite-only scripts (contract). When you sign up as Novice it is kept with your email on our mailing list.
- Country you live in, declared at checkout, and the country of your connection, read from your IP address when you open the checkout: to apply the right rules to your purchase and to spot errors or misuse (legal obligation and legitimate interest).
- Hyperliquid address you opened through our referral link: to check the referral offer (contract).
- Payment data: card payments are handled by Stripe, which sees your card; we receive the payment status, the amount and the country of the card. For USDC payments we receive the sending address, the amount and the transaction, which are public on the blockchain (contract and legal obligation).
- Messages you send us (contract or legitimate interest).
- Telegram: if you connect Phisys to Telegram, the chat identifier needed to send you alerts (contract).
3. What we do not collect
Phisys runs in your browser: your tests run on your computer, and the data arrive for the test and are cleared after. Your trading keys are created in your own Cloudflare account and never reach us. This site sets no cookies. The Hyperliquid Account Audit runs in your browser too: the address you paste goes straight from your browser to Hyperliquid, and neither the address nor the results reach us.
4. Who else receives data
- Stripe, for card payments.
- Cloudflare, which receives mail for phisys.app and forwards it to our inbox.
- Google, for our email (Gmail). The fonts of this site are served from this site, not from Google.
- GitHub, which hosts this site and keeps technical logs of visits.
- Umami, which counts visits for us without cookies and without storing your IP address: we see pages viewed, the country, the browser and the kind of device, in aggregate (legitimate interest).
- Brevo (Sendinblue SAS, France), which keeps the monthly report list and sends the emails, including the confirmation one.
- Hyperliquid, whose public API your browser calls when you use the audit.
- api.country.is and ipapi.co, which read the country of your connection at checkout.
- open.er-api.com and frankfurter.dev, which give the exchange rate at checkout.
- Hyperliquid, Arbitrum and Base nodes, when you pay in USDC or connect your wallet.
- Telegram, if you connect it.
Some of these providers are outside the European Union, mainly in the United States. Transfers rely on the EU–US Data Privacy Framework or on the standard contractual clauses.
5. How long we keep it
- Invoices and payment records: 10 years, as Italian law requires.
- Email for the monthly report: until you unsubscribe.
- Licence and account data: for the duration of your plan and up to 24 months after.
- Messages: as long as needed to answer and follow up.
6. Your rights
You can ask to access, correct, delete or receive your data, to limit or object to its use, and withdraw your consent at any time, by writing to abaco@phisys.app. You can also complain to the Italian data protection authority, the Garante per la protezione dei dati personali (garanteprivacy.it), or to the authority of the country where you live.
7. Changes
If we change this policy, we update this page and its date, and tell you by email when the change matters to you.