Privacy Policy
This Privacy Policy explains what information Alpha VIP Signals ("we", "us") collects, how we use it, and the choices you have.
1. Information We Collect
- Account info: email, password hash, optional full name, optional Telegram username.
- Payment info: plan selected, LKR amount, payment method (bank transfer or cryptocurrency), bank reference or transaction hash, and any metadata returned by our payment processor. We do not collect or store credit or debit card details — we do not accept card payments.
- Usage data: pages visited, signals viewed, timestamps, IP address, browser type. Used for security, fraud prevention, and product improvement.
- Communications: any messages you send us via email, Telegram, Discord, or the contact form.
2. How We Use Your Information
- To operate the Service, authenticate your account, and deliver signals.
- To process payments and activate your subscription.
- To send transactional emails (receipts, subscription notices, password resets).
- To provide customer support.
- To detect, prevent, and respond to fraud, abuse, or security incidents.
- To comply with legal obligations (anti-money-laundering, tax, court orders).
3. Legal Basis
Where GDPR applies, we rely on: contract (to deliver the service you purchased), legitimate interests (security, product improvement), consent (where required for marketing), and legal obligation (tax and regulatory reporting).
4. Sharing Your Information
We do not sell your personal data. We share limited data only with:
- Payment processors (e.g. NOWPayments) to process crypto transactions.
- Infrastructure providers (hosting, email, analytics) acting as data processors under contract.
- Authorities when legally required by valid process in a relevant jurisdiction.
5. International Transfers
Our servers and service providers may be located outside your country of residence. Where data is transferred across borders, we use appropriate safeguards (standard contractual clauses or equivalent) where required.
6. Data Retention
We retain account and transaction data for as long as your account is active, and for up to 7 years after closure to comply with tax and accounting obligations. Usage logs are retained for 12 months. You may request deletion — see Section 8.
7. Security
We use industry-standard measures — TLS encryption in transit, hashed passwords (bcrypt), secure HTTP-only session cookies, least-privilege access controls, and regular patching. No system is 100% secure; if we become aware of a breach affecting your data, we will notify you as required by law.
8. Your Rights
Depending on your jurisdiction, you may have the right to access, correct, delete, or export your personal data, to object to or restrict certain processing, and to withdraw consent. To exercise any of these rights, email [email protected]. We will respond within 30 days.
9. Cookies
We use only essential cookies required to keep you logged in. We do not use third-party advertising cookies or cross-site tracking.
10. Children
The Service is not directed to anyone under 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us with data, contact us and we will delete it.
11. Changes
We may update this policy. Material changes will be notified via email or a prominent notice. Continued use of the Service after an update constitutes acceptance.
12. Contact
Data protection questions: [email protected] or via our contact page.