Privacy Policy

# Privacy Policy — Vigil Signals

Last updated: April 2026

## 1. Information We Collect

- Email address (for account creation and communication)
- Hashed password (we never store plaintext passwords)
- Telegram chat ID or Discord webhook URL (for signal delivery, if you connect them)
- Subscription and billing information (processed by Stripe; we do not store credit card numbers)
- Signal delivery logs (which signals were sent to you and when)

## 2. How We Use Your Information

- To provide and maintain the Service
- To deliver trading signals to your connected channels
- To process subscription payments
- To communicate service updates and important notices
- To improve the Service based on usage patterns

## 3. Data Storage and Security

- All data is stored on secure servers hosted on AWS
- Passwords are hashed using bcrypt
- Exchange API keys (if applicable in future versions) are encrypted at rest using AES-256
- We use HTTPS for all data transmission
- Access to user data is restricted to authorized personnel only

## 4. Data Sharing

We do not sell, trade, or share your personal information with third parties, except:
- Stripe (payment processing)
- As required by law or legal process

## 5. Data Retention

- Account data is retained while your account is active
- Upon account deletion, all personal data is permanently removed within 30 days
- Signal delivery logs are retained for 90 days for audit purposes

## 6. Your Rights

- You may request a copy of your data at any time
- You may request deletion of your account and all associated data
- You may disconnect Telegram/Discord at any time through the API

## 7. Cookies

The Service API does not use cookies. If a web dashboard is provided, it may use essential cookies for session management only.

## 8. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes via email or through the Service.

## 9. Contact

For privacy-related questions, contact: [support email]