Privacy
What we collect
Account email, Telegram handle (if you link one), your risk preference, terms-acceptance records (version, time, IP), and subscription status from Stripe. Payments are processed by Stripe; we never see or store card numbers.
Analytics
Aggregate, privacy-respecting page analytics (Plausible) and ad-platform conversion events (Meta, X, Google) on marketing pages with UTM attribution. No analytics run inside the private alert channel.
How it's used
To operate the service: deliver alerts, manage access on payment and cancellation, meet legal obligations, and measure which public pages bring members. We do not sell personal data.
Retention & deletion
Account data is kept while your account exists. Email a deletion request and account data is removed within 30 days, except payment records retained as legally required.
Security
Data lives in Supabase with row-level security; access keys are held server-side only; transport is TLS. Nightly backups are kept for disaster recovery.
Contact
Send access and deletion requests to the operator. Reply to the receipt Stripe emailed you and it reaches the operator.