1. Overview & Controller

Controller:
Biturai L.L.C‑FZ, Dubai (Contact: info@biturai.com)

2. Processing Purposes & Legal Basis

• Website: Security logs (IP, Time). Legal basis: Art. 6 (1) lit. f GDPR (Legitimate Interest).
• Contact: Processing email inquiries. Legal basis: Art. 6 (1) lit. b GDPR (Contract/Pre-contract) or lit. f (Legitimate Interest).
• Newsletter: Updates. Legal basis: Art. 6 (1) lit. a GDPR (Consent).

3. Newsletter, Magic Link & Email Communication

When you sign up for our newsletter or request a magic link to sign in, we process your email address. Legal basis: Consent (Art. 6 (1) lit. a GDPR) or Contract performance (Art. 6 (1) lit. b GDPR).

Newsletter Subscription on Login: When signing in via magic link, you are automatically subscribed to our newsletter unless you have previously unsubscribed. This is part of our free service offering. You can unsubscribe at any time.

Double Opt-In: Clicking on the magic link to sign in also serves as double opt-in for the newsletter. This confirms that you have access to the specified email inbox and actively wish to subscribe.

Email Provider: We use Resend (resend.com, Resend Inc., USA) for sending emails, including:

• Magic links for authentication
• Newsletter and market analysis (with consent)
• System notifications

Processed Data: Email address, signup timestamp, language preference (DE/EN), newsletter consent status, unsubscription timestamp (if unsubscribed).

International Transfer: Resend is a US provider. Your data is transferred to the USA. We have a Data Processing Agreement (DPA) with Resend. EU Standard Contractual Clauses (SCCs) apply.

Tracking: If enabled, the newsletter may track open and click rates for statistical purposes.

Withdrawal: You can withdraw your newsletter consent at any time (unsubscribe link in every email or via info@biturai.com). After unsubscribing, you will not be re-subscribed on future logins.

3a. Telegram Community

Link: t.me/biturai_chat

• Controller: Telegram is an independent controller.
• Biturai Processing: We moderate content (Legitimate Interest).

3b. Skool Community

Community Platform: skool.com.

• Platform: Skool is the controller for platform operation.
• Merchant of Record: Skool handles payments.
• Biturai Processing: We manage access and support (Performance of Contract / Legitimate Interest).
• Transfer: Skool is a US provider (Data transfer to USA).

3c. Community Invitation (Join Form)

When you join the community via the form on our website ("Join Community"/"Join the Dojo"), we process the following data:

• Data Categories: Email address (Required), Timestamp, IP Address, Language (EN).
• Purpose: Automated dispatch of an invitation to the Biturai Skool Community via email.
• Processors / Recipients:
  • Zapier (USA/Global): We use Zapier for automation (Data reception from form → Triggering invitation). Standard Contractual Clauses (SCCs) are in place.
  • Skool (USA): The email invitation is technically sent by the Skool platform. Your email address is transferred to Skool for this purpose.
• Legal Basis: Your explicit consent by checking the box in the form (Art. 6 (1) lit. a GDPR).
• Retention: Data in the automation log (Zapier) is deleted after operational necessity expires. In Skool, data is permanently processed only if you accept the invitation and register there.
• Withdrawal: You can withdraw your consent at any time before submitting the form or by contacting us.

3d. Real-Time Chat (Dojo Chat)

We operate an integrated real-time chat. We process username, messages (text/voice), IP via Pusher (UK) and Vercel Blob (Storage, USA). Legal basis: Contract performance (Art. 6 (1) lit. b GDPR).

3e. AI Assistant ("Biturai")

We use AI (Google Gemini/OpenAI). Your prompts are sent to these providers. We do not share personal user data in public chats. The AI may learn from interactions to improve service.

3f. AI Content Generation (News & Wiki)

We use AI technologies for automated content creation.

• Data Sources: Public web data via search APIs (e.g. Tavily) and market data (e.g. CoinMarketCap).
• AI Models: Text/Image generation via Google DeepMind (Gemini). User personal data is not used for this, unless part of public web content.
• Storage: Database (Neon) and Vercel Blob Storage (Images).

4. Affiliate Links

We use affiliate links to exchanges (Bitget, Toobit, Bitunix). If you click, referral codes are passed. We receive commissions based on aggregated data. We do not receive your clear ID data from exchanges.

5. Cookies, Tracking & Consent

Consent Management (Usercentrics)

We use Usercentrics to manage your consents. (Legal Obligation).

Tracking / Tag Management

We use Google Tag Manager (GTM). If you consent (Opt-in via Usercentrics), we use pixels from:

• Meta (Facebook)
• X (Twitter)

Purpose: Conversion tracking. Transfer: USA. Withdrawal: Via settings/footer.

6. International Transfer

Biturai is in Dubai (UAE). Data is transferred to a third country. We take measures to ensure data security.

7. Storage Duration

We store data only as long as necessary for the purpose or legal obligations. Afterwards, it is deleted.

8. Your Rights

Access, Rectification, Erasure, Restriction, Portability, Objection (GDPR Art. 15-21).

Contact: info@biturai.com