Last Updated: May 9, 2026 Effective Date: May 9, 2026
This Privacy Policy describes how PastullioBot ("we," "us," or "our") collects, uses, and shares information when you use our website, application, and services (collectively, the "Service"). PastullioBot is operated by Christopher Maffeo, doing business as PastullioBot.
If you have questions about this policy, contact us at hello@pastulliobot.com.
We use the information we collect to:
We do not sell your personal information. We do not share it with third parties for their marketing purposes.
To operate the Service, we share necessary information with the following providers:
| Provider | Purpose | What We Share |
|---|---|---|
| Stripe | Payment processing | Email, purchase amount, product purchased |
| Supabase | Authentication, database hosting | All account and usage data we store |
| Resend | Transactional email delivery | Email address, message content |
| Anthropic | AI analysis (Claude API) | Market data and prompts; NO personal account info is sent |
| DigitalOcean | Server hosting | Server-level data (logs, IP for routing) |
| Kalshi | Source of market data | None — we read public Kalshi API only; no user data sent |
Each provider is contractually obligated to protect data and use it only to provide services to us. Their privacy policies govern their handling:
We may add or change providers as the Service evolves. Material changes will be reflected in this policy.
PastullioBot's analysis is generated by Anthropic's Claude API. When you run a scan:
We log scan metadata (which categories you scanned, when, how many credits used) for billing and audit purposes, but the AI inputs/outputs themselves are not retained after the scan completes other than the resulting signals shown in your scan history.
| Data Type | Retention Period |
|---|---|
| Active account information | While your account is active |
| Account information after deletion request | Anonymized within 30 days |
| Inactive accounts (24+ months no login) | Notified, then anonymized after 30-day grace |
| Scan history (detailed) | 90 days |
| Scan history (aggregate stats) | Lifetime of account |
| Financial records (purchases, ledger, refunds) | 7 years (IRS/tax compliance) |
| Server logs | 30 days rolling |
| Email logs | Per Resend's retention policy |
"Anonymized" means we remove personally identifying fields (email, name, telegram handle) but may retain a non-identifying record for audit, analytics, or legal compliance purposes.
Depending on where you live, you may have the following rights regarding your personal information:
To exercise any right, email hello@pastulliobot.com from the email address associated with your account. We will respond within 30 days, or sooner if required by law.
In addition to the above:
In addition to the above:
Our legal basis for processing is primarily: - Contract (to provide the Service you signed up for) - Legitimate interest (security, fraud prevention, service improvement) - Consent (where you opt into specific features like Telegram alerts) - Legal obligation (financial record retention)
We do not transfer data outside the US, but our service providers (Stripe, Anthropic, Supabase, Resend, DigitalOcean) may. Where required, we rely on Standard Contractual Clauses or equivalent transfer mechanisms.
We take reasonable technical and organizational measures to protect your information, including:
No system is completely secure. If we discover a breach affecting your personal information, we will notify you and applicable authorities as required by law.
The Service is not intended for anyone under 18. We do not knowingly collect information from minors. If we learn we have collected information from a minor, we will delete it promptly. If you believe a minor has provided us information, contact hello@pastulliobot.com.
The Service is operated from the United States. By using the Service, you consent to the transfer of your information to the US, which may have different data protection laws than your country of residence. For users in regions with stricter privacy laws (EU, UK, California), we apply protections required under those laws as described in Section 6.
We use a minimal authentication token stored in browser localStorage to keep you logged in. This is a functional necessity, not a tracking cookie.
We do not use: - Advertising cookies - Analytics cookies (no GA, Mixpanel, etc.) - Third-party tracking pixels - Cross-site tracking technologies
If our practices change, we will update this policy and seek consent where required.
We may update this policy as the Service evolves. The "Last Updated" date reflects the most recent revision. Material changes will be communicated via email to your account address or via in-app notice at least 14 days before taking effect.
Continued use of the Service after changes constitutes acceptance.
Privacy questions, data requests, or complaints:
Email: hello@pastulliobot.com Operator: Christopher Maffeo, doing business as PastullioBot Mailing Address: Available on request to hello@pastulliobot.com
For unresolved privacy concerns, EU/UK users may contact their local data protection authority. California residents may contact the California Attorney General.