Privacy Policy

Data controller

Vigil is operated by Marcell, a private individual based in Hungary. Contact: [email protected].

What data we collect

We collect the minimum data needed to provide the service:

• Email address. Provided when you purchase a subscription via Stripe, when you sign up to the indicator email list, or when you contact us directly.
• Payment information. Processed by Stripe. We do not store or have access to your full card details. We receive only your Stripe customer ID, transaction confirmation, and subscription status.
• Telegram chat ID. Assigned automatically by Telegram when you message @VigilMarketBot. We use this to deliver messages to you.
• Telegram username (optional). If you provide it, used for identification only.
• Activation codes. Generated by us, sent to your email after payment, used to link your Telegram account to your subscription.
• Service usage data. Which commands you send to the bot, your display preferences (set via /settings), the dates of your subscription events.

We do not collect: real name, postal address, phone number, IP address logs beyond Cloudflare's standard ingress logs (which we do not query or retain), or any data unrelated to delivering the service.

Why we collect it

• To deliver the subscription service (Telegram broadcasts, on-demand commands).
• To process payments and renewals.
• To send transactional emails (activation codes, payment notifications).
• To respond to your support requests.
• To comply with applicable tax and legal obligations.

We do not use your data for advertising, profiling, or sale to third parties.

Legal basis for processing (GDPR)

• Contract performance: delivering the subscription you purchased.
• Legal obligation: retaining transaction records as required by Hungarian tax law.
• Legitimate interest: preventing fraud and abuse.
• Consent: when you join the email list for the free indicator (you may withdraw consent any time by unsubscribing).

Data processors we use

We rely on the following third-party services to operate Vigil. Each processes data on our behalf under their own privacy terms:

• Stripe, Inc. (USA / Ireland) payment processing. stripe.com/privacy
• Resend (USA) transactional email delivery (activation codes, payment notifications). resend.com/legal/privacy-policy
• Loops So, Inc. (USA) email list management and drip sequences for the indicator funnel and newsletter. loops.so/privacy
• Cloudflare, Inc. (USA) website hosting, DNS, email forwarding, and serverless functions for form submission. cloudflare.com/privacypolicy
• Telegram FZ-LLC (UAE) message delivery. telegram.org/privacy
• Railway Corp. (USA) application hosting. railway.app/legal/privacy
• CoinGecko (Singapore) market data provider. They do not receive user data, only market data queries.

Some of these processors are located outside the European Economic Area. Where they process personal data on our behalf, transfers are covered by Standard Contractual Clauses or equivalent safeguards as required by GDPR.

How long we keep your data

• Active subscribers: for as long as your subscription is active, plus 12 months after cancellation, to comply with tax record-keeping obligations.
• Cancelled subscribers: transaction records retained for 8 years as required by Hungarian tax law. Other personal data deleted on request or at the end of the 12-month grace period.
• Indicator email list (non-subscribers): until you unsubscribe.
• Support correspondence: up to 2 years after the last message.

Your rights under GDPR

You have the right to:

• Request access to the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data (subject to retention obligations above).
• Request export of your data in a portable format.
• Object to processing.
• Withdraw consent (where consent is the basis for processing).
• Lodge a complaint with the Hungarian data protection authority (NAIH): naih.hu

To exercise any of these rights, email [email protected]. We respond within 30 days.

Cookies and tracking

gainvigil.com uses no analytics cookies, no tracking pixels, no advertising trackers. We may use a session cookie strictly necessary for the website to function. No consent banner is required for strictly necessary cookies under EU law.

Children

Vigil is not directed at people under 18. We do not knowingly collect data from minors. If you believe a minor has subscribed, contact us at [email protected] and we will delete the account.

Security

We protect your data through encryption in transit (HTTPS), encrypted-at-rest storage on our hosting provider, and access controls limiting data access to the project operator only.

Changes to this policy

We may update this Privacy Policy as the service evolves or as legal requirements change. Material changes will be announced via email to active subscribers and posted on this page with a new "Last updated" date.

Contact

Questions, requests, or concerns about this Privacy Policy: [email protected].