Privacy Policy

Effective date: 1 October 2026

This Privacy Policy explains how SygmaLab (“Sygma Lab.AI”, “we”, “us”) collects, uses and protects personal data when you visit sygmalab.com, create an account or buy a subscription to our products (including AI Trader, “AIT”). By using the website you acknowledge this Policy.

1. Who we are

The data controller is SygmaLab. Contact for all privacy matters: [email protected].

2. Data we collect

  • Google account data. When you choose “Continue with Google” we receive, with your consent, your name, e-mail address, profile picture and a unique Google account identifier (scopes openid, email, profile). We do not receive your Google password or access to any other Google data.
  • Subscription and payment records. Selected plan, amount, currency, payment method, status, date, and the reference or transaction ID you enter (for example, the last 4 digits of your card or a blockchain transaction hash). We never receive or store full card numbers, CVV codes or bank credentials; card and crypto transfers are made by you directly.
  • Technical data. A session cookie that keeps you signed in, and standard server logs (IP address, browser type, time of request) kept by our hosting provider for security.
  • Communications. Messages and images (for example, payment screenshots) you send us through Support in your account, e-mails you send us, and your e-mail if you subscribe to our updates.
  • Enquiries from the site. Your name, the contact you want us to reply to (Telegram, WhatsApp, phone or e-mail) and the description of your task that you leave in the enquiry form on our service pages. If you send an enquiry via Google, it is saved in your account as a support request.

3. How and why we use it (legal bases)

  • To create and maintain your account, sign you in, provide the subscription you paid for and show your payment history — performance of a contract.
  • To confirm payments, prevent fraud and secure the service — legitimate interests and legal obligations.
  • To answer your requests and send service messages about your account — contract / legitimate interests.
  • To send news and offers only if you subscribed — consent, which you can withdraw at any time.

4. Google user data — Limited Use

SygmaLab’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We use Google data only to sign you in and identify your account; we do not use it for advertising, do not sell it, and do not allow humans to read it except with your consent, for security reasons or where required by law.

5. Cookies

We use only strictly necessary and preference cookies: the sign-in session cookie (sl_sess, up to 30 days), a short-lived security cookie during Google sign-in, and interface preferences — your language (sl_lang) and collapsed sections (sl_fold), up to one year. We do not use advertising or cross-site tracking cookies. Your browser’s local storage may also keep interface preferences and the draft of an unsent enquiry.

6. Sharing and processors

We do not sell personal data. We share it only with providers that help us run the service, under their own security and privacy commitments: Cloudflare (hosting, storage, security), Google (sign-in), Telegram (internal payment and support notifications to our team), and public blockchain networks (Tron, BNB Smart Chain) where crypto transactions are, by their nature, public. We may disclose data if required by law or to protect our rights.

7. International transfers

Our providers may process data in different countries. Where required, transfers are protected by appropriate safeguards offered by these providers, such as standard contractual clauses.

8. Retention

Account data is kept while your account exists. Payment records and support conversations are kept for as long as needed for accounting, dispute, quality and legal purposes (normally up to 5 years). Sessions expire after 30 days. On account deletion we erase or anonymise your data unless we must keep it by law.

9. Your rights

Depending on where you live (including under the GDPR and similar laws), you may have the right to access, correct, delete or export your data, restrict or object to processing, and withdraw consent. You can also revoke SygmaLab’s access in your Google Account settings. To exercise your rights, write to [email protected]; we answer within 30 days. You may also lodge a complaint with your local data protection authority.

10. Security

Data is transmitted over HTTPS, stored with access control, and session cookies are HttpOnly and Secure. No method is 100% secure, but we work to protect your data and will notify you of a breach where required by law.

11. Children

Our services are intended for adults (18+). We do not knowingly collect data from children; if you believe a child has provided us data, contact us and we will delete it.

12. Changes

We may update this Policy. The current version is always published on this page with its effective date; significant changes will be announced on the website or by e-mail.

13. Language

This Policy is also available in other languages. In case of any discrepancy between a translation and the English version, the English version prevails.

14. Contact

SygmaLab · [email protected] · sygmalab.com