Privacy Policy

Last updated: 8/15/2026

This policy explains what personal data PortoSignal collects when you use our website, dashboard, and connected Telegram channels, why we collect it, and the choices you have.

Data we collect

Account information: email, name, and password (stored as a salted hash, we never store your plain-text password)
When you sign in with Google: your Google account name, email, and profile image
When you connect Telegram: your Telegram username and numeric user ID
Subscription and payment status (not card details, those are stored and processed by our payment provider, Whop)
Two-factor authentication status (your TOTP secret is encrypted at rest and is never visible to us in plain text after setup)
Push notification subscription details, if you enable browser push notifications
Product usage data: login times, pages viewed, and which signals or weekly results you access
Messages you send us through the contact form (name, email, and message content)

How we use your data

To create and manage your account and verify your subscription tier
To deliver signals, weekly performance summaries, and account notifications
To provide access to digital products (indicator programs) you've purchased
To respond to support requests submitted through the contact form
To detect and prevent fraud, abuse, and unauthorized account sharing
To meet legal and accounting obligations

Cookies and analytics

We use a small number of cookies to keep you signed in and to remember your preferences. With your consent, given through the cookie banner shown on your first visit, we also load Google Tag Manager and Google Analytics to understand how visitors use the site. Analytics is only loaded after you accept; you can decline, and you can change your mind at any time by clearing your browser's local storage for this site.

Sharing

We do not sell your data. We share the minimum necessary data with the service providers that run the platform on our behalf:

Whop: payment processing and subscription management
Resend: transactional email delivery (password resets, weekly result emails)
Telegram: signal delivery and channel access for your connected account
Google: sign-in (if you use "Continue with Google") and, with your consent, analytics

These providers only receive the data needed to perform their function and are not permitted to use it for their own purposes.

Data retention

We keep your account data for as long as your account is active. If you delete your account, we remove your personal data within a reasonable period, except where we're required to keep records (e.g. payment records) for legal or accounting purposes.

Your rights

Request a copy of the personal data we hold about you
Ask us to correct inaccurate data
Ask us to delete your account and associated data
Opt out of the weekly results email at any time from Dashboard → Settings → Notification preferences
Withdraw analytics cookie consent at any time

Children's privacy

PortoSignal is not directed at, and is not intended for use by, anyone under 18. We do not knowingly collect data from minors.

Security

We use industry-standard measures to protect your data, including hashed passwords, encrypted two-factor secrets, and TLS in transit. No system is perfectly secure, but we work to keep your information safe and will notify affected users if a breach materially impacts your data.

Changes to this policy

We may update this policy from time to time. The current version is always published on this page, and the "last updated" date reflects the latest revision.

Contact

For any privacy questions or to exercise your rights, reach us at support@portosignal.com.