This policy explains what personal data Xanguard collects when you use the website at xanguard.tech, the documentation at docs.xanguard.tech, the Xanguard Telegram bots and the Xanguard API (the "Service"), how we use it, and the choices you have. We collect as little as we need to run the Service.
1. What we collect
When you use a Xanguard bot
- Telegram account details that Telegram shares with bots: your Telegram user ID, username, and first and last name, plus the chat ID of any group or channel where you add a bot.
- Your settings: the X accounts, keywords, communities, tweets, wallets, callers or tokens you choose to track, your filters and alert preferences, and any webhook URL you register.
- Usage events: the commands and buttons you use, the link that brought you to a bot (for example a referral code or a website tag), when you were last active, and whether a bot can still message you.
- Support messages you send us on Telegram.
When you pay
- The plan you bought, the price, the SOL amount, the one-time payment address, the payment status and time, and the on-chain transaction reference.
- If you take part in the referral program: who referred you, your referral code, and the Solana wallet address you give us for payouts.
Solana transactions are public. Anyone can see a payment on the blockchain, and it cannot be erased.
When you use the API
- Your API key, which we store only in hashed form (we keep a short prefix so you can recognise it), your plan details, and webhook URLs and signing secrets you set up.
- Technical records of requests and connections, such as time, endpoint and IP address, used for security, limits and troubleshooting.
When you visit the website
- Server logs: IP address, browser user agent, the page requested, the referring page and the time.
- Google Analytics 4: we use Google Analytics to understand how the site is used, for example pages viewed, how you arrived, approximate location, device type and clicks on Telegram links. Google Analytics uses cookies.
- Session storage: the site keeps a short label of how you arrived (for example "google" or "direct") in your browser's session storage so we can tell which channels bring users to our bots. It contains no personal details and is cleared when you close the tab.
- Dashboard login: if you sign in to the web dashboard with Telegram, we set a secure, HttpOnly session cookie to keep you signed in.
2. What we do not collect
We never ask for or store your X (Twitter) password, your wallet seed phrase or private keys, or any card details. We do not need an email address or phone number to provide the Service.
3. Data about the accounts you track
The Service processes publicly available information from X, pump.fun and the Solana blockchain about the accounts, tokens and wallets that users choose to track, such as posts, profile details and follow activity, in order to deliver alerts. We do not sell this information as a database of individuals.
4. How we use your data
- to provide the Service: deliver alerts, run your settings and API access;
- to process payments, activate plans, and pay referral commissions;
- to send you service messages, such as payment confirmations and reminders before a plan ends;
- to answer support requests;
- to keep the Service secure, enforce plan limits and prevent abuse;
- to understand and improve the Service, for example which pages and channels bring users and which features are used.
Where data protection law requires a legal basis, we rely on performing our contract with you (running the Service you asked for), our legitimate interests (security, analytics and improving the Service), legal obligations (for example keeping payment records), and your consent where we ask for it.
5. Who we share data with
We do not sell your personal data. We share it only as needed with:
- Telegram, which carries every bot message;
- Google, which provides Google Analytics for the website;
- infrastructure and hosting providers that run the Service for us under their own security obligations;
- the Solana network, where payments are public by design;
- authorities, when the law requires it, or to protect the Service, our users or others from harm;
- a buyer or successor, if the Service is sold or reorganised, under this policy.
6. How long we keep data
We keep account and settings data while you use the Service and for a reasonable period afterwards, so that your setup is still there if you come back. Payment records are kept as long as needed for accounting and legal purposes. Server logs and technical records are kept for a limited period for security and troubleshooting. Google Analytics data is kept according to our Google Analytics retention setting.
7. Your choices and rights
- You can stop using a bot at any time by removing your tracked items and blocking or deleting the bot in Telegram.
- You can ask us for a copy of your data, to correct it, or to delete it by messaging @notAdegen on Telegram. Deleting your data ends any active plan. Records we must keep by law, and transactions on the public blockchain, cannot be deleted.
- You can block or delete cookies in your browser, or use Google's opt-out add-on, to stop Google Analytics.
- Depending on where you live, you may have further rights, such as to object to some processing or to complain to your data protection authority.
8. Security
We use encrypted connections (HTTPS) for the website and API, store API keys only in hashed form, and limit access to personal data to the people who run the Service. No system is perfectly secure, so please keep your Telegram account and API keys safe.
9. International processing
We and our providers may process data in countries other than the one where you live. Where required, we use appropriate safeguards for those transfers.
10. Children
The Service is not meant for anyone under 18, and we do not knowingly collect data from children.
11. Changes to this policy
We may update this policy. We will post the new version on this page with a new "Last updated" date.
12. Contact
Privacy questions or requests: @notAdegen on Telegram. See also the Terms of Service.