Privacy Policy

1. Who we are

LiqSonar is responsible (the “controller”) for personal data processed through the website, the Telegram bot @liqsonarbot and the API. Contact: support@liqsonar.com.

2. What we collect

Account: email address, password (stored only as a bcrypt hash) and preferred language.

Telegram: chat ID, username and first name when you use the bot or sign in with Telegram.

Payments: plan, amount, status, period and the payment provider’s payment ID. Payments are processed by NOWPayments or Crypto Pay; we do not receive wallet keys or card details. Blockchain transactions are public by nature.

API: API keys, stored only as hashes, and request counts for rate limiting.

Notifications: if you turn on browser notifications, your browser’s push subscription (an address at the browser’s push service and its encryption keys), linked to your Telegram chat. Turn them off on the Alerts page at any time.

Referrals: which Telegram chat invited which, to credit referral rewards.

Technical: IP address, browser type and request logs, used for security and rate limiting.

We do not use advertising trackers or third-party analytics.

3. Why we use it

To provide the Service and your plan, process payments and send service messages such as email verification, password reset and renewal reminders (performance of a contract); to keep payment records (legal obligations); to protect the Service from abuse (legitimate interest). We do not sell personal data and do not send marketing email without your consent.

4. Service providers

We share data only with providers that help us run the Service: Railway (hosting and database), Cloudflare (backup storage), Telegram (bot messages), Resend (email delivery), NOWPayments and Crypto Pay (payments), and the push service of your browser’s vendor (for example Google, Mozilla or Apple) for notifications you turned on. Google Gemini receives market data for AI analyses, never your personal data.

Some of these providers are located outside the European Economic Area. Such transfers rely on the safeguards the providers offer, such as the EU Standard Contractual Clauses.

5. Cookies and local storage

We use only necessary and preference cookies: token keeps you signed in, lang remembers your language for a year, tg_login and tg_link hold a one-time Telegram sign-in code for 10 minutes, ref remembers an invite code for 30 days. Your browser’s local storage keeps interface settings, and a service worker shows the notifications you turned on. There are no tracking cookies, so no consent banner is needed.

6. How long we keep data

Account data is kept while your account exists and deleted within 30 days after you ask us to delete it. Payment records are kept as long as needed for accounting and to resolve disputes. Deleted data can remain in backups for a limited time until those backups are replaced.

7. Your rights

Under the GDPR and similar laws you can ask for access to your data, correction, deletion, restriction, a portable copy, or object to processing. Write to support@liqsonar.com; we answer within 30 days. You can also complain to your local data protection authority. Sending /stop to the bot stops its messages.

8. Security

Passwords and API keys are stored only as hashes, connections use HTTPS, and access to production systems is restricted.

9. Children

The Service is not intended for anyone under 18, and we do not knowingly collect their data.

10. Changes

We may update this policy. The date at the top shows the latest version; material changes are announced on the website or in the bot.