1. Who we are
ONYX Group operates the Silver Insider Pack (cot/comex/squeeze/vix widget bundle).
Contact: support@onyxgroup.cloud.
2. What data we collect
We collect the minimum data necessary to deliver alerts:
- Email address (from Stripe checkout) — required to send subscription receipts and login links.
- Telegram chat_id (when you send
/silver_subscribe to our bot) — required to deliver alerts.
- Stripe customer_id (assigned by Stripe) — required to link your subscription to your Telegram chat_id.
- Payment data — handled entirely by Stripe. We do not see or store your card details.
Data we do NOT collect:
- TC kimlik numarası — we do not collect Turkish national ID numbers (KVKK compliance).
- Phone numbers — Telegram chat_id is not a phone number.
- Real names — unless you choose to include one in your Stripe profile (visible only on receipts).
- IP addresses for tracking — server logs contain IPs for ~14 days for abuse prevention only; no analytics.
- Trading account data — we never see or request your broker/exchange credentials.
3. How we use your data
Your data is used exclusively to deliver the service:
- Send subscription receipts and trial-end reminders to your email.
- Route
[SILVER]-tagged alerts to your Telegram chat_id.
- Verify your subscription status when you send commands to our bot.
- Detect and prevent abuse (e.g. multiple subscriptions on the same chat_id).
We do not sell, rent, or share your data with third parties, except:
- Stripe (payment processing — required).
- Telegram (alert delivery — required).
- Legal authorities, only when compelled by court order.
4. Your rights (GDPR — EU/UK users)
If you are in the EU or UK, you have the following rights under GDPR:
- Access: request a copy of all data we hold on you.
- Rectification: request correction of inaccurate data.
- Erasure ("right to be forgotten"): request deletion of your data.
- Portability: request your data in machine-readable JSON format.
- Objection: object to processing for any reason.
To exercise any of these rights, email
support@onyxgroup.cloud
with the subject "GDPR request — [your email]". We respond within 30 days.
5. Your rights (KVKK — Turkey)
KVKK (6698 sayılı kanun) kapsamında haklarınız:
- İşlenen kişisel verileriniz hakkında bilgi talep etme.
- Verilerin düzeltilmesini veya silinmesini talep etme.
- İşleme amacını ve aktarıldığı üçüncü kişileri öğrenme.
- İtiraz ve şikâyet hakkı (Kişisel Verileri Koruma Kurumu).
Talepleriniz için support@onyxgroup.cloud
adresine "KVKK talebi" konu satırıyla yazınız. 30 gün içinde cevap veririz.
TC kimlik numarası toplamadığımız için kimlik doğrulama email + Stripe customer_id ile yapılır.
6. Data retention
- Active subscription: data retained for the duration of your subscription.
- After cancellation: data retained for 90 days (in case you re-subscribe), then deleted.
- Erasure request: data deleted within 30 days, except records required by tax law (Stripe payment receipts — 5 years).
- Server logs: rolled after 14 days.
7. Security
All data is stored on encrypted VPS infrastructure. Stripe webhook signatures are
verified on every event (we refuse to process unsigned/invalid events — protecting
both your subscription and our service). TLS 1.2+ enforced on all endpoints.
8. Changes to this policy
We will notify you by email at least 14 days before any material change. The "Last updated"
date at the top reflects the most recent revision.
9. Contact
Privacy questions: support@onyxgroup.cloud.