Privacy Policy

Effective date: October 6, 2026

Fundamental Secrets LLC, doing business as CoinPicks (“CoinPicks,” “we,” “us,” or “our”), operates the CoinPicks online communities hosted on Skool — including the CoinPicks community at skool.com/coinpicksgenesis and our related member communities — along with the website coinpicks.app and related content, products, software tools (including our AI Traders), and services (collectively, the “Services”). Most members join and interact with us through our Skool community pages, which serve as our primary online presence.

This Privacy Policy explains what information we collect, how we use it, and the choices you have. By joining our community or using our Services, you agree to the collection and use of information as described in this Policy. If you do not agree, please do not use the Services.

1. Information We Collect

Information you provide to us:

• Contact information — such as your name, email address, and phone number, provided when you join one of our communities on Skool, answer membership questions, sign up for our content, contact us, or make a purchase.
• Quiz and form answers — such as your comfort with risk, roughly how much you have in crypto, whether you plan to keep adding to it, your goal, and which AI Trader you were matched with, provided when you complete the AI Trader quiz or similar forms on our website. These answers are self-reported, are linked to your contact information, and are used as described in this Policy.
• Financial planning information — transactions you import or enter, categories and remembered categorization rules, dated account balances, debts, and investment-planning inputs. CSV files are parsed in your browser; when you choose Save finances, the extracted financial profile is stored encrypted and associated with your signed-in account. We use these entries to calculate the reviewed cash-flow and balance summaries you choose to apply to your plan. The original CSV file is not uploaded. CSV parsing, manual entry and rule-based categorization do not send your financial profile to an AI service. Planning does not initiate financial transactions. You can edit or remove entries, save those changes, and export your saved profile. Recovery backups remain subject to the retention process below.
• Optional financial document reading — when you choose Read document, the selected PDF, image or document (or text extracted from it) is sent through Vercel AI Gateway to Google's Gemini model to identify financial records. This may include financial and personal information visible in the selected file; only upload a document you are authorized to share. We request provider routing with zero data retention and no model training. CoinPicks does not retain the original file or the raw model response. Extracted suggestions remain in your browser until you choose which records to add and save. We keep encrypted usage counts, request identifiers and timestamps to enforce limits and prevent duplicate processing. CSV and manual entry remain alternatives that do not use document-reading AI.
• Payment information — processed by Stripe for website purchases, and by Skool’s payment system for subscriptions purchased there. Stripe receives the account email and purchase details needed to process checkout and manage billing. We store billing references, subscription and payment status, and invoice, refund and dispute records to verify membership and provide support. We do not store full payment card numbers on our systems.
• Communications — messages you send us by email, text message, chat, or through our community.

Information collected automatically:

• Usage data — such as pages visited, links clicked, browser type, device information, and IP address, collected through cookies and similar technologies (including analytics tools) when you visit our website or community pages.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and improve the Services;
• Deliver the content, community access, and products you request;
• Match you with tools and content — for example, using your AI Trader quiz answers to recommend one of our AI Traders, text you the link to it, and prepare for a setup call if you request one;
• Communicate with you, including customer support, service updates, and — where you have opted in — marketing communications by email or text message;
• Process payments and prevent fraud;
• Comply with legal obligations.

3. Phone Verification and Communications Choices

For lost-phone access, you can request a one-time verification code at your existing account email. Our email provider delivers that security message. We store a protected digest of the code, its expiry, attempt limits and verification receipts in your encrypted account security record. Requesting or using a code does not change your phone number or marketing choices.

We collect the phone number you provide, its verification status, and records of verification requests and results to verify account access and reduce abuse. When you request a code, our verification provider, Twilio, processes the number and related delivery and security information to send and validate it. We validate phone format and use request limits to reduce misuse. Verification confirms access to that number at the time of the check; it does not establish legal identity.

We record your separate choices for live marketing calls, automated marketing texts and marketing emails, including when you made or changed a choice, the contact information it applied to, and the disclosure shown. These records help us respect your choices. Verifying your phone does not sign you up for marketing, and declining marketing does not change your membership or account access.

You can change or withdraw these choices in phone and contact preferences or by emailing admin@coinpicks.app. Any enabled marketing email includes an unsubscribe option. If marketing texts are enabled, their program provides an opt-out method, including STOP where replies are supported. Necessary service communications and security messages you request are handled separately.

This website update saves preferences; it does not activate a new marketing delivery service. Provider, carrier and local restrictions can prevent communications even when you have opted in. Live-call permission does not authorize prerecorded or artificial-voice marketing calls, or recording a call.

We do not sell mobile opt-in information or share it with third parties or affiliates for their own marketing. Service providers may process this information on our behalf to deliver permitted communications, handle requests and maintain suppression records. We retain the records needed to honor opt-outs and meet applicable obligations, subject to the retention policy below.

4. How We Share Information

We do not sell your personal information. We share information only:

• With service providers who perform services on our behalf — such as payment processing, email and text message delivery, community hosting (Skool), customer relationship management, customer support, and analytics — and who are bound to use the information only to provide those services to us;
• For legal reasons — when required by law, regulation, legal process, or to protect the rights, safety, and property of CoinPicks, our users, or others;
• In a business transfer — if CoinPicks is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

We do not share mobile opt-in information with third parties or affiliates for their own marketing. Providers acting on our behalf may process it as described in Section 3.

5. Third-Party Platforms

Our communities are hosted on Skool (skool.com), which has its own terms of service and privacy policy governing your use of that platform. Information you provide directly to Skool when creating a Skool account is governed by Skool’s privacy policy. We encourage you to review it.

6. Legacy AI Traders and Third-Party AI Platforms

Our legacy AI Traders are written instructions that you copy into a third-party AI assistant, such as Claude by Anthropic. They are separate from the Beacon product described below. Your conversations with that assistant happen inside your own account on that platform — not on our systems. We do not see, receive, or store anything you type to the assistant, and we do not receive its responses to you. That data is governed by the AI platform’s own privacy policy, which we encourage you to review before you use it.

Anything you choose to tell an AI assistant — including how much you hold, your goals, and any trading instructions you give it — is handled by that platform, not by CoinPicks. If you set up automated trading, the assistant acts inside your own AI account and your own exchange account; CoinPicks is not part of that connection. We never ask for and never accept your exchange logins, passwords, private keys, or seed phrases. This includes the optional Autonomous Apps feature: it runs on your own computer, and any exchange or wallet keys it uses are saved in an encrypted vault on your device. We never receive or store them. No legitimate CoinPicks tool or team member will ever ask for your logins, passwords, or seed phrases.

The quiz answers you submit on our own website (described in Section 1) are collected by us — not by the AI platform — and are handled under this Policy.

6A. CoinPicks AI — Our Chat Assistant

Separately from the AI Traders above, we offer CoinPicks AI: a chat assistant and mini-app builder that runs on our own website (the “Chat”). The Chat works differently from the copy-into-your-own-account AI Traders, so here is exactly how it handles your data:

• Stored conversations may remain in your account so you can return to them. Requests to delete conversation data are handled by our team under the retention and privacy-request process below. Removing an active copy does not immediately erase earlier recovery backups.
• Your messages are sent to Anthropic (the maker of Claude) to generate each reply. Anthropic does not use them to train its models — that is part of our commercial agreement with them — and deletes chat data from its systems within about 30 days, unless its safety systems flag something harmful.
• The Chat only uses your conversations to train our own AI if you switch on “Help improve CoinPicks AI” in its settings. It is off by default, applies only to chats created after you turn it on, and can be turned off at any time.
• The Chat may remember facts you tell it about yourself so you don’t repeat them. Every remembered fact is listed on its Memory page, where you can delete any or all of them, or turn memory off.
• If you save your own API keys in the Chat’s settings, we store them encrypted and use them only to make the requests you or your apps ask for. We never display them again and never share or sell them. The Chat never accepts exchange keys or wallet keys and never places trades. Logins, passwords, and seed phrases are never accepted, anywhere.
• Usage is measured in tokens. We keep a record of tokens granted, bought, and spent so your balance is accurate.

The Chat currently remains a locked Draft. Its former policy links now lead to this Privacy Policy and the shared Terms and Conditions.

6B. CoinPicks Beacon and the Autonomous Trader beta

Free daily research for every signed-in CoinPicks member after completing the Autonomous Trader access form, with a private key for the official CoinPicks Autonomous Trader or your own tools. VIP adds hands-on setup, personal training and troubleshooting support. Beacon daily research and the official Autonomous Trader beta for Mac and Windows are free for signed-in members after completing the access form. The current Website edition supports optional Beacon research; the legacy Community edition excludes Beacon. These are separate from legacy AI Trader prompts, the private Autonomous Trader Lab and CoinPicks AI. The Autonomous Trader beta runs in your own environment. Automatic decisions use your chosen Codex or Claude Code subscription connection, the OpenAI API, the Anthropic API, or a custom OpenAI-compatible API. API keys are stored in your encrypted local vault and API usage is billed separately by your provider account. Setup checks your selected model before activation. Beacon is not a CoinPicks-managed trading account. The Chat-specific data practices and token balance described above do not describe Beacon's API or its monthly API credits. Where an existing VIP credit allowance applies, Beacon associates its monthly allowance record with your verified account and policy month so the same allowance is not issued twice. Beacon credits are distinct from AI-provider tokens; current daily feed reads deduct no credits and keep a separate daily request count.

Job applications

When you apply through our careers page, we collect the contact details, location, time zone, availability, confirmation of in-person work in downtown Orlando, experience, work links, role answers, optional compensation expectations, and PDF résumé you submit. We use this information to review your application and manage the hiring process. Please share only work you have permission to disclose and avoid including identity documents, financial account details, or sensitive personal information.

Application details, AI reviews and internal review notes are encrypted in our database. Résumés are stored in private Vercel storage and can be viewed or downloaded only through an authorized hiring account. Owners and staff explicitly granted Manage hiring can review applications. Ordinary Admin access does not include hiring. Our hiring coordinator receives an email through Resend with the role and a link to the private workspace; the email does not contain your résumé or application answers.

We use AI to assist human review of submitted experience, role answers and PDF résumés against the role requirements. These materials are sent through Vercel AI Gateway to Google’s Gemini model, with provider routing that requests zero data retention and no model training. Your résumé and free-text answers may include personal information, so omit sensitive details that are not needed for the application. The review produces provisional evidence scores, summaries and questions for the hiring team. It does not automatically reject applicants or make hiring decisions. People check the evidence and decide the next steps; you may contact us to correct information or request a human review.

After confirming applicant notice, an authorized hiring reviewer may request a separate public professional-source review of specific work claims. When enabled, it sends your name and limited professional context to Exa to find and read public work sources, then sends selected application text and source excerpts through Vercel AI Gateway to Gemini to organize cited findings. Optional professional website and profile links can help match the right person. We do not use this feature to investigate private life, personal social activity, protected characteristics, criminal or credit history. No public profile is required, and missing online information is not a negative finding. Research reports and request records are kept privately with your application. A person must check possible matches, conflicting information and your explanations before making any decision; contact us to correct a source or request human review.

We use a submission reference to prevent duplicate applications and limited email and network identifiers to control abusive submissions. Applying does not create a member account or subscribe you to marketing. For a correction, withdrawal, or privacy request, contact admin@coinpicks.app and include your application reference if available. Requests are handled by our team under the retention and legal-obligation provisions below; applications do not expire automatically.

7. Cookies, Analytics, and Advertising

Learning accounts, activity and bug reports

When you sign in to save your course progress, we associate your lesson completion, quiz attempts, and workbook answers with your verified email account. We store these records encrypted in our Neon database and serve the website through Vercel, so you can return on another device. Signed-out progress stays in your browser and can be saved to your account when you sign in. Your browser also keeps a local copy to recover work after a connection problem.

Our assigned support and strategy team can see a customer activity timeline with verified sign-ins, observed website sessions, course completion counts, and lesson-comment activity. This helps us support your learning and follow through on appointments. The CRM timeline does not include your private course workbook answers or private assistant conversations. Community activity and live-session attendance appear only when the relevant source provides an identifiable event. Access to individual customer records is limited to authorized staff; company-wide views use aggregate results.

We check verified Stripe billing records and our existing Skool member ledger, as applicable, to determine your current membership access. Signing in to learn does not subscribe you to marketing emails. Conversations from retired assistant features may remain in your existing account records under the retention policy below; removing a feature does not publish those conversations.

When you report a website problem, we store the description, the page path you choose to include, replies, assignment, status changes and their authors and times. Your verified account identifies your report. Contact and billing corrections are handled by the support team; the website does not automatically merge accounts using different email addresses. You can see your own reports; only staff with bug-management access can see the support queue and respond. Report details and replies are encrypted in our database. Avoid including passwords, payment details, wallet keys or information about other members. Reports and updates appear within the website. When our team replies, we send you a short email with a link to your report; the email does not include the reply or your report.

We use cookies and similar technologies to operate our website, understand how visitors use it, and — when you allow it — measure our advertising. Optional usage analytics uses first-party browser identifiers only when you enable Usage analytics. That choice is separate from Advertising. Advertising cookies and pixels (such as the Meta Pixel, TikTok Pixel, and Google tags) are set only if you enable Advertising on our cookie banner; these tools may share information about your visit (such as pages viewed and your device) with the advertising platform, which some laws treat as a “sale” or “sharing” of personal information for targeted advertising.

Your choices: you can decline advertising cookies on the banner, or change your mind at any time using the “Your Privacy Choices” control in Account or the website footer — choosing “No thanks” there is how you opt out of the sale or sharing of your personal information for targeted advertising. We also honor the Global Privacy Control (GPC) browser signal as an opt-out. You can additionally control cookies through your browser settings; disabling cookies may affect some features of the Services.

Consented usage analytics records reviewed page identifiers, named clicks, exposures and scroll milestones. It can link an observed browser entry to verified account creation, a saved plan, lesson marked read, practice marked complete or completed lesson, and a verified payment to measure conversion. Behavioral analytics uses opaque identifiers, not names or email addresses. We exclude raw query strings, tokens, form contents, messages, financial answers and private tool inputs from these payloads. Session recordings are disabled. Detailed analytics has a 90-day retention limit; deidentified aggregate caches have a 24-month limit. Provider collection remains disabled until its configuration and retention meet these limits.

Turning off Usage analytics stops future optional collection and clears this browser’s analytics identifiers. The website also requests removal of its native visitor-cohort link for that consent choice; a connection failure may require retrying Your Privacy Choices. Essential account, learning and billing records remain available to provide your service. Contact us below to request deletion of retained personal information.

8. Data Retention and Security

We retain personal information for as long as needed to provide the Services and for legitimate business or legal purposes. We use reasonable administrative, technical, and physical safeguards designed to protect your information. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Recovery backups may retain earlier versions after information is corrected or removed from active systems. Those copies are restricted to recovery and authorized operational purposes. Before returning restored data to use, our team must account for later deletion requests and communication opt-outs. We may retain limited records needed to honor those requests, prevent misuse, document how a request was handled, or meet applicable obligations. Deletion requests do not automatically delete records held independently by Skool or other providers; we will explain the applicable limits when handling your request.

Website Q&A notifications use your current community access and saved notification choices. We store encrypted preferences, read markers and reminder receipts. Where email or text delivery is enabled, reminders require the corresponding contact consent; email uses Resend and texts use Twilio. You can turn reminder categories off in notification settings, unsubscribe through a reminder email or reply STOP to a reminder text. Phone verification alone does not subscribe you. Reminder links open the session in Skool.

9. Children’s Privacy

Our Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us at admin@coinpicks.app and we will delete it.

10. Your Choices and Rights

• Email marketing: unsubscribe using the link in any marketing email.
• Text messages: reply STOP to any text message.
• Access, correction, and deletion: you may request access to, correction of, or deletion of your personal information — including your AI Trader quiz answers — by emailing admin@coinpicks.app. Depending on where you live, you may have additional rights under applicable law, and we will honor requests as required.

For account, membership, or billing help, visit Account & help. To report a website problem and follow replies, use member support. Account deletion and broader data-access requests are handled by the team through the email above; there is no automatic website account-deletion control.

While signed in, you can also download a private copy of your saved website data from Account & help. This includes saved lesson progress and answers, planner inputs, saved financial-profile transactions, categories, rules and account balances, contact preferences, and your member-visible support conversations. It does not include billing records, records held only by other providers, job applications or résumés, internal security records, retired assistant conversations, or drafts saved only on your device. Stripe invoices are available through Membership & billing. Contact the team for a broader request, including billing records, or if your download is unavailable.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be posted with a revised effective date. Your continued use of the Services after changes are posted constitutes acceptance of the updated Policy.

12. Contact Us

CoinPicks (Fundamental Secrets LLC)
189 South Orange Avenue, Suite 1520B
Orlando, FL 32801
Email: admin@coinpicks.app
Community: skool.com/coinpicksgenesis