Privacy Policy

Last updated: June 9, 2026

Foresignal respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and disclose information about you when you visit our website, create an account, or use the Foresignal viral-content detection service (the "Service"). Key facts: we monitor only public Telegram channels (@username); raw message content is not stored beyond 48 hours.

Sole Proprietor (FOP) Kharchenko Yaroslav Oleksandrovych ("Foresignal", "we", "us", "our"), registered at Komunalna St 16, Hlukhiv, Sumy Oblast, 41400, Ukraine, is the data controller for personal data we process about our customers and website visitors.

Foresignal monitors only public Telegram channels (accessible via @username). Private groups, personal chats, and paid-subscription channels are never accessed. Raw message content is not stored beyond 48 hours. Only aggregated trend signals (score, channel count, timestamps) are retained for the period covered by your plan.

Information You Provide

Account information: name, email, hashed password, time zone, language, billing address, and tax identification where required.
Billing information: processed by our payment provider (NOWPayments — cryptocurrency). We store only a transaction reference and plan status; no card data is collected or stored.
Alert configuration: channel list, topic keywords, delivery method (Telegram handle or webhook URL), and alert threshold settings.
Webhook / API credentials: if you configure a webhook endpoint or API key, we store the URL and a hashed secret. We do not log request payloads beyond operational debugging (retained up to 72 h).
Support communications: messages you send through email, contact forms, or support chat, including attachments.

Information Collected Automatically

Usage data: pages viewed, features used, publishing outcomes, errors, click events, referrers, and session duration.
Device and connection data: IP address, browser type, operating system, device type, screen size, and language preference.
Cookies and similar technologies: see our Cookie Policy.

Information from Third Parties

Telegram public channel data: message text, author, and timestamp from public channels you track. Raw content is discarded within 48 hours; only trend signals (score, channel count, timestamps) are retained per your plan's history window.
Payment processor (NOWPayments): transaction status, payment confirmations, and plan-activation events. No card data is processed by us.
Authentication providers: if you sign in with Google or another OAuth provider, we receive your email, name, and provider user ID.

We process personal data under the following GDPR Art. 6 legal bases:

Performance of a contract: providing the Service (account, scheduling, publishing, analytics, billing), and customer support.
Legitimate interests: security, fraud and abuse prevention, audit logs, product analytics, and debugging.
Consent / legitimate interests: marketing emails about new features (unsubscribe at any time), depending on jurisdiction.
Legal obligation: tax, accounting, and lawful requests.

Important: we do not sell your personal data. We do not use Telegram message content to train machine-learning models. We do not read your content for advertising purposes. Raw message content is automatically discarded within 48 hours.

We share personal data only with the following categories of recipients:

Subprocessors and infrastructure providers. Cloud hosting, databases, object storage, email delivery, error monitoring, analytics, support tooling — listed in Schedule 2 of our DPA.
Payment processor (NOWPayments). For transaction verification and plan-activation events. No card data is involved.
Professional advisers. Lawyers, accountants, auditors, and insurers under confidentiality obligations.
Authorities. Where required by law, court order, or to protect our rights, safety, or property.
Successors. In a merger, acquisition, or asset sale, personal data may transfer to the successor entity.

We do not sell your personal information to third parties.

We are based in Ukraine and use infrastructure providers located in the European Union and the United States. Where personal data is transferred outside its country of origin, we rely on:

the European Commission's Standard Contractual Clauses (SCCs) and the UK Addendum,
adequacy decisions where applicable,
supplementary technical measures (encryption in transit and at rest).

You can request a copy of the safeguards by emailing privacy@foresignal.biz.

We retain personal data only as long as necessary:

Raw Telegram message content: automatically discarded within 48 hours of ingestion. Only trend signals are retained.
Trend signal history: per your plan — Free: not retained; Pro: 30 days; Team: 90 days.
Account record: lifetime of your account plus 30 days after deletion.
Alert configuration (channels, topics, webhooks): until you delete them or close the account.
Billing records and invoices: 7 years (Ukrainian tax law).
Server and security logs: up to 12 months.
Backups: up to 35 days from creation.

When you delete your account, we permanently delete or irreversibly anonymise your personal data within 30 days, except where retention is required by law.

Depending on your jurisdiction (GDPR, UK GDPR, CCPA/CPRA, Ukrainian Law on Personal Data Protection, and similar regimes), you have the right to access, rectify, erase, restrict, object, port your data, and withdraw consent. You may also lodge a complaint with your local supervisory authority.

To exercise these rights, email privacy@foresignal.biz. We respond within 30 days and may need to verify your identity.

California residents have additional rights — see Do Not Sell or Share My Personal Information.

We implement administrative, technical, and physical safeguards including encryption in transit (TLS 1.2+) and at rest (strong symmetric encryption), access controls, audit logging, and regular backups. See Security & Compliance for details.

If we become aware of a personal-data breach affecting your information, we will notify you and the relevant supervisory authority within 72 hours where required by law.