This Privacy Policy explains how Alfa Trigger ("we", "us") collects and uses personal data when you visit our website or use our trading-signal service (the "Service"), in accordance with the EU General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR").
1. Data controller
The data controller is Alfa Trigger, Catania, Sicily, Italy. You can contact us about privacy matters at @AlfaTriggerSupport_bot / [email protected].
2. What data we collect
- Account data: your e-mail address, username and password. Passwords are stored only as a salted, one-way hash (bcrypt); we cannot read them.
- Subscription data: your free-trial and plan dates, the plan you chose, and the customer and subscription identifiers that Stripe assigns to you.
- Telegram data: if you connect Telegram, your Telegram chat ID, so that we can send you signal alerts. Connecting Telegram is optional.
- Manual payment requests: if you pay with cryptocurrency, the network, transaction ID (TXID) and any note you submit.
- Technical data: your IP address, browser user agent, the pages you request and the time of the request. This is processed to deliver the website, prevent abuse (for example, limiting repeated login attempts) and keep the Service secure.
- Anonymous visit statistics: to count visits we record the page viewed, the time, a coarse device type (for example "Chrome · Windows · desktop") and a pseudonymous code computed from your IP address and browser with a secret key that changes every day. We do not store your IP address, use cookies or link visits to your account, and the code cannot be used to recognise you on a different day.
- Preferences: your chosen language.
We do not collect special categories of data and we do not use your data for advertising or profiling.
3. Payments: we never store your card details
Card payments are processed by Stripe on Stripe's own secure checkout pages. Your card number, expiry date and security code are entered directly with Stripe and never reach or are stored on our servers. We only receive confirmation of the payment, the amount, and Stripe's customer and subscription identifiers. Stripe processes payment data under its own privacy policy (stripe.com/privacy).
4. Why we use your data and our legal bases
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Creating and managing your account, providing the free trial and the Service, sending signals on the dashboard and Telegram | Performance of a contract (Art. 6(1)(b)) |
| Processing payments and managing subscriptions | Performance of a contract (Art. 6(1)(b)) |
| Keeping invoices and payment records | Legal obligation (Art. 6(1)(c)) |
| Security, fraud and abuse prevention (including repeated free trials), rate limiting and server logs | Legitimate interests (Art. 6(1)(f)) |
| Service e-mails such as password resets | Performance of a contract (Art. 6(1)(b)) |
| Anonymous visit statistics, to understand which pages are used and improve the Service | Legitimate interests (Art. 6(1)(f)) |
Our signals are generated automatically from public market data. The AI analysis uses market data only; no personal data is used to generate signals, and we make no automated decisions about you that have legal or similarly significant effects.
5. Who receives your data
We share data only with service providers that help us run the Service, under data-processing terms:
- Stripe: payment processing and subscription management.
- Cloudflare: content delivery and protection against attacks; all website traffic, including IP addresses, passes through Cloudflare.
- Our hosting provider: servers on which the Service and its database run.
- Telegram: delivery of alerts, if you connect Telegram.
- Our e-mail provider: delivery of service e-mails.
- Content delivery networks for fonts and scripts (Google Fonts, jsDelivr, unpkg, cdnjs and the Tailwind CSS CDN): your browser loads these files directly, so these providers receive your IP address.
We do not sell your personal data. We may disclose data where required by law or to protect our rights.
6. International transfers
Some providers (for example Stripe and Cloudflare) may process data outside the European Economic Area, including in the United States. Such transfers rely on an adequacy decision (such as the EU-U.S. Data Privacy Framework, for certified providers) or on the European Commission's Standard Contractual Clauses.
7. How long we keep data
- Account, subscription and Telegram data: for as long as your account exists. When you ask us to delete your account, we delete it within 30 days.
- Payment and invoice records: for the period required by tax and accounting law (in Italy, up to 10 years).
- Server logs and security data: for a short period, after which they are deleted or rotated. Rate-limiting data is kept only in memory, for at most one hour.
- Anonymous visit statistics: up to 13 months, then deleted automatically.
8. Your rights
Under the GDPR you have the right to access your data, to have it corrected or erased, to restrict or object to its processing, and to data portability. To exercise any of these rights, write to @AlfaTriggerSupport_bot / [email protected]. We will reply within one month. You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU country where you live or work, or where an alleged infringement took place (in Italy: the Garante per la protezione dei dati personali, garanteprivacy.it).
9. Security
We protect your data with encrypted HTTPS connections, hashed passwords, secure HttpOnly cookies, protection against cross-site request forgery, rate limiting and restricted server access. No system is completely secure, but we work to protect your data and will notify you and the authorities of a personal-data breach where the law requires.
10. Cookies
We use only essential cookies. See our Cookie Policy.
11. Minors
The Service is intended for adults aged 18 or over. We do not knowingly collect data from minors.
12. Changes
We may update this Privacy Policy. The date of the latest version is shown at the top of this page; we will notify registered users of material changes by e-mail or on the dashboard.