Privacy policy
What is collected, why, and how to have it removed.
Effective from October 24, 2026
Who is responsible
Signalyze is run by an independent developer, who decides how the data described here is used. Questions about this policy and requests concerning your data are handled through Telegram at t.me/Webrekas, which is the current contact point for data protection matters.
What is collected
When you use the bot or the Mini App: your Telegram user id, the language your client reports, the language you choose, the time zone and trading preferences you set, and a record of the commands and interactions you make. Each of those interactions is also recorded with the country your connection is seen from, as a two-letter country code supplied by our network provider. Your IP address is used to route the request and is never stored by Signalyze, and no city, region, postcode or coordinates are collected at all. Profile fields such as a first name or username are stored only where Telegram supplies them, and each is stored with a record of where it came from. If you ask to be paid commission from the referral programme, the payout address you give us is stored with that request. When you visit this website: standard server request data, and, only if you consent, the third-party analytics described below. Signalyze never asks for and never stores exchange API keys, wallet keys, seed phrases or passwords. If you build strategies in the Mini App, the strategies you save, with their names, their rules and every version, and the replays you run are stored with your account. If you take part in the weekly exchange-volume VIP, the exchange UIDs you submit (one per exchange) are stored with your account, and so are the trading volume the exchange's partner report states for each UID week by week and a record of the VIP days granted for it. Partner reports cover every account registered through our partner links, so volume is also stored for referred accounts that never used Signalyze, and it is linked to nobody until someone claims that UID.
Why it is collected
To deliver signals to the right person in the right language, to prevent a redelivered message from sending you the same thing twice, to see which parts of the service are used so it can be improved, to keep an audit record of what the service did, and to keep the service secure and working. Account records are kept separate from identifying details so that identity can be unlinked without destroying the operational record. Strategies members build are visible to Signalyze's administrators, who review them when deciding whether one should become the system strategy. Exchange UIDs and the volume the partner report states are used only to check that an account was registered through our partner link, to decide who reached the weekly volume threshold and to add the VIP days that earns.
Who else receives anything
Telegram carries every message and every payment made with Stars, so Telegram sees your use of the bot and the Mini App under its own privacy policy. When you pay in crypto, our payment provider receives the amount and a reference that identifies the purchase, and takes the payment details directly; Signalyze never sees or stores them. Our network provider sits in front of this website, routes the request and supplies the two-letter country code described above. The provider that runs our analysis models receives the market text being analysed, and no account data of yours is sent with it. If you allow measurement on this website, Google (Google Ads and Google Analytics 4) and Cloudflare (Web Analytics) receive what the analytics section below describes. Nobody receives your data to use for their own marketing, and none of it is sold.
How long it is kept
Account and preference records are kept while your account exists. Audit records, including the interaction and country records described above, are kept for thirteen months and then removed automatically, a whole month at a time. Signal and market records carry no personal data and are kept as the service's own history. Strategies you build are kept while your account exists and are deleted with it; the results of replays you ran are then kept with nothing linking them to you. Weekly volume rows from the partner reports are deleted automatically thirteen weeks after their week ends, whether or not anyone claimed the UID. Your UID claims, including rejected ones, are kept while your account exists and are removed when you ask for your data to be erased. The record of VIP days granted for volume is kept as part of your subscription history.
Analytics and consent
On the public website, optional measurement tools load only when they are configured and, where consent is required (including the EEA, the UK, Switzerland and Turkey), only after you allow measurement. They are Google Ads conversion measurement and Google Analytics 4, both through Google's tag, and Cloudflare Web Analytics. When you arrive from an ad link that carries click or campaign tags (gclid, wbraid, gbraid or utm_ parameters) and you have allowed measurement, or consent is not required where you are, the site sends those tags, the landing path, the referring site's host name and the page language to Signalyze's own attribution endpoint (/api/v1/attribution/touches) and keeps a random id in a first-party cookie named sz_attr for 90 days. That id travels into Telegram when you open the bot or the Mini App, so a sign-up or a purchase can be linked to the ad that brought you and reported to Google Ads as a conversion. Untagged visits send nothing, and declining changes nothing about how the site works. The language switcher keeps your choice in a first-party cookie named NEXT_LOCALE for a year. Your browser sends it only to this site, which reads it only to open the home page in that language. Your theme choice stays in your browser's local storage and is never sent. Neither is shared with anyone else. Signalyze also counts how its own bot and Mini App are used on its own servers. None of these website tools load inside the Mini App or the admin area.
Your rights
You can ask what is held about you, ask for it to be corrected, and ask for it to be erased. Erasure removes the link between you and the service's records: your Telegram identity and stored profile are deleted, while the operational audit trail remains in a form that no longer points to you. Records we are required to keep, such as the record of a payment, are kept for as long as the law requires. You can also withdraw analytics consent at any time. Depending on where you live you may also have the right to complain to a data protection authority.
Contacting us
Reach us on Telegram at t.me/Webrekas for any request under this policy. A support panel in the app and on this site is planned, and this section will be updated when it is available.