Privacy Policy

Varnoxa stores the minimum data required to operate the product, secure accounts, deliver alerts and improve reliability.

We currently process account identity data, session records, watchlist settings, Telegram binding metadata, billing-related access records, and product telemetry needed for uptime and abuse control.

Identity data is used for authentication, workspace access, security review and account recovery.

Watchlists, preferences and Telegram bindings are used only to personalize market views and route alerts that the user explicitly enables.

We do not sell personal data.

We share data only with service providers required to run the product, such as hosting, email delivery, authentication, payment and observability vendors.

Security logs, audit trails and session records can be retained for fraud prevention, incident review and legal compliance.

Users can request account deletion, and operational records that must be retained for security or billing integrity are minimized and kept only as long as required.

Varnoxa applies access controls, audit logs, secure cookies, signed webhooks, encryption in transit and production secret management.

No internet-facing service can be promised as perfectly secure, but we treat security as a release gate rather than a later add-on.