Last updated: 6 October 2026

1. Who we are (data controller)
The controller of your personal data is Signal room. Contact for any privacy request: [email protected]. We offer the service worldwide and we apply the rules of the EU General Data Protection Regulation (GDPR) as our reference standard for all users.

2. What data we collect

• Account data: username, email address, password (stored encrypted — never in clear text) and, optionally, your Telegram username.
• Subscription data: free-trial end date, subscription expiry date, personalised conditions set by the admin.
• Payment data: the payment you declare (coin, network, amount, date and, if provided, the transaction code TXID) and the admin's confirmation. We do not collect card or bank data.
• Support data: the messages you exchange with our support team (tickets).
• Your results (ROI): the trades and results you enter yourself in the panel.
• Usage and security data: accesses to the panel (IP address, date and time, referring page), the outcome of your login attempts, the calls to our API if you use your personal API key, and the technical logs necessary to protect the service. We also record the date and time (and the IP address) when you accept these policies and the terms of service.
• Preferences: your choices about marketing and the weekly recap.

3. Why we use it (purposes and legal bases)

• To provide the service (create your account, publish the signals, manage your subscription and payments, customer support) — legal basis: performance of a contract.
• Security and fraud prevention (limit login attempts, protect the panel, keep it working) — legal basis: our legitimate interest in protecting the service and its users.
• Evidence and defence of our rights (proving, for example, when an account was created, which conditions and consents were accepted, or how the service was used — including in a dispute) — legal basis: our legitimate interest.
• Service information for registered users (for example: telling you where the signals are published - including the free public Telegram channel - sending you the weekly recap if you enabled it, and keeping you updated about the service) — legal basis: our legitimate interest in keeping the users who registered with us informed about the service they signed up for, so that they actually receive the signals. These messages go only to registered users, are occasional and strictly related to the service, and every one of them contains a one-click link to stop receiving them.
• Marketing (news and occasional promotions about new features, offers or partners) — legal basis: your consent, which you can give or remove at any time.
• Legal and accounting obligations — legal basis: legal obligation.

We do not use your data for automated decision-making that produces legal effects, and we do not sell it to anyone. IP addresses are used only for security and evidence: we do not use them to build profiles, to follow you across other websites, and we never sell or share them for advertising.

4. Cookies and measurement
We use technical cookies necessary for the service to work (in particular the session cookie that keeps you logged in). We do not use advertising or profiling cookies of our own, and we do not sell your data to anyone.
On the public pages of the website we also use Google Analytics, a third-party measurement service that tells us how many people visit, roughly from where, and which pages get read. It sets its own cookies (named _ga and similar, lasting up to 2 years) and the data is processed by Google as an independent provider. We look at it only in aggregate: we do not use it to profile you, to follow you on other websites or to show you advertising.
Analytics cookies are loaded only after you accept them: a small panel appears at the bottom of the page and, until you press "Accept", no script from Google is downloaded at all. If you decline, nothing is loaded and the site works exactly the same. To change your choice later, clear this site's data in your browser (or open the panel again from a private window). You can also block these cookies in your browser at any time without losing any part of the service - including the whole platform, which keeps working with the technical session cookie alone.
Some pages, once you are logged in, may include widgets from third parties (for example a market chart or an external service); those providers may set their own cookies, so please refer to their policies.

5. How long we keep it
Account, subscription, support and ROI data are kept as long as your account exists and for a short period afterwards if needed to protect our rights. Payment records may be kept longer when required by accounting or tax law.

5.1 IP addresses and security logs — how long exactly
We record IP addresses only for security (failed logins, abuse) and as evidence (when you accept the terms and the consents, and in case of a dispute). We keep them for the time strictly necessary:

• Login attempts (IP address, date and time, outcome): 90 days, then deleted;
• Anti-abuse counters (for example repeated password-recovery requests): 7 days;
• Calls to our API with your personal key (IP address, endpoint, outcome): 90 days;
• Accesses to the panel and acceptance of the terms and consents (date, time and IP address): up to 12 months, then deleted or anonymised. The record that proves a consent (for example your marketing choice) is kept as long as necessary to demonstrate that the consent was given.

6. Who may see your data
Your data is accessible only to those who need it (us and, within their task, our support). We use service providers who process data on our behalf, such as the hosting provider, the CDN/security provider (the platform is protected and delivered through a Cloudflare network) and the email provider. We do not sell or rent your data. When the law requires it, we may disclose data to competent authorities.

7. Transfers outside the EU
Some providers may process data outside the European Economic Area. In that case we rely on the safeguards provided by law (such as standard contractual clauses) or we keep the processing within regions that offer an adequate level of protection.

8. Security
Passwords are stored using a strong one-way algorithm (Argon2id), the connection is encrypted (HTTPS), the panel is protected by a firewall and by limits on failed attempts, and the credentials of the service are kept outside the public web folder. No system is perfectly secure: if you notice a problem, contact us immediately.

9. Your rights
As a user you can, at any time: access your data, ask for its correction or deletion, ask to limit or to object to the processing, receive your data in a portable format, and withdraw the marketing consent (or change it in your profile). To exercise your rights write to [email protected]. You also have the right to lodge a complaint with the data protection authority of your country (in the EU, your national supervisory authority).

10. Emails we send you
There are two kinds of email, and they are different on purpose:

• Service emails - these are part of the service and are sent to registered users: your account (for example password recovery), the free trial and the subscription, support tickets, the weekly recap if you enabled it, and occasional information about where the signals are published - including the free public Telegram channel. You can stop these emails at any time with the link at the bottom of each one; stopping them does not affect your account, your trial or your signals.
• Marketing emails - only if you gave the marketing consent during registration (or later in your profile): news and promotions. The consent is optional, it does not affect the service, and it can be removed at any time in your personal area.

Every email we send - of both kinds - contains a link to stop receiving it, and no click is needed to keep using the platform. We keep the record of your choice (date, time and IP address) so that we can prove that we respected it.

11. Changes
We may update this policy: the version published on this page is the valid one, with the date of the last update shown at the top.