Legal
Privacy Policy
Effective: May 14, 2026
1. What we collect
We collect the minimum data needed to run a signal subscription service:
- Wallet address. When you connect a Solana wallet, your public address is stored to gate access and to verify on-chain USDC payments.
- Telegram identifier. When you link your Telegram account, your Telegram user ID and chosen username are stored so we can issue invite links and check membership.
- Subscription metadata. Tier, start date, payment transaction signature, expiry.
- Operational logs. IP address, user agent, request timing — for fraud prevention and abuse mitigation. Retained 30 days.
We do not collect your private keys, seed phrase, or any custody-relevant credential. We never could — the wallet adapter only requests signatures.
2. How we use it
- To grant and revoke access to the VIP Telegram channel.
- To send transactional notifications (subscription expiry).
- To detect and block abuse (re-broadcasting, sharing, scraping).
- To prepare anonymized, aggregate performance reports.
3. Service providers we share data with
We rely on standard infrastructure providers. Each receives only what it strictly needs:
- Supabase (database, EU region) — wallet addresses, Telegram IDs, subscription rows.
- Telegram — your Telegram identifier and group membership.
- Helius / Birdeye / DexScreener — public on-chain data lookups only; no personal data is sent.
- Railway / Vercel / Cloudflare — hosting and CDN. They process request metadata (IP, headers) per their own privacy policies.
We do not sell or rent your data to anyone.
4. Cookies
The web app uses essential cookies to keep you signed in to your dashboard. No third-party advertising or analytics cookies are set without explicit consent.
5. Your rights
Depending on your jurisdiction (GDPR/EEA, UK, California, Türkiye KVKK, etc.) you may have the right to access, correct, export, or delete personal data we hold about you. To exercise these rights, email support@alphapulsebot.com from the email tied to your account (or send a signed message from your connected wallet).
On-chain transaction data is public and immutable — we cannot “delete” payments from the Solana blockchain.
6. Data retention
- Active subscription rows: until 12 months after expiry.
- Operational logs: 30 days rolling.
- Support correspondence: 24 months.
7. Security
Database access uses row-level security; admin keys are stored in managed secret vaults. We do not store any private keys, mnemonics, or payment credentials. Despite reasonable safeguards, no system is perfectly secure — you use the Service at your own risk.
8. Changes
Material changes will be posted at alphapulsebot.com/privacy. Continued use after a change constitutes acceptance.
9. Contact
For any privacy question, email support@alphapulsebot.com.
Questions? Email support@alphapulsebot.com.