Privacy
Policy

The data controller is [legal entity — not yet registered]. Until that is settled there is no legal person to name, and this policy cannot be relied on.

No Data Protection Officer has been appointed. Whether one is required is part of the pending legal review.

For any request about your data: Vyronsociety@gmail.com.

If you only reserve a place: your email address, optionally your first name, the membership tier you selected, and the date. If you came through Telegram, your Telegram username and chat id, and your answers to the five questions.

If you become a member: name, email, country, date of birth, and anything you choose to put in your profile. Date of birth is stored rather than age so that it does not go stale; it also makes this age-verification data.

Your trading journal: asset, direction, entry, stop, target, position size, risk percentage, profit and loss per trade, strategy, session, screenshots and free-text notes.

Community: your posts, replies, reactions, mentions and direct messages.

Learning and activity: which lessons you watched and how far, points earned, challenge completions and streaks, event RSVPs.

Support: your tickets and messages, including internal notes staff write about a ticket. Those internal notes are still your personal data and you can ask for them.

If you talk to the chat assistant: the messages you send it.

If you message the Instagram assistant: the details listed under the Instagram assistant specifically.

The trading journal is the most revealing data in the system. In aggregate it discloses income, wealth, risk appetite and losses.

It is readable only by you. Not by other members, and not by the founders. That is not a promise in a policy — it is enforced by row-level security in the database, so it holds even for someone with access to the admin tools. Direct messages are closed the same way.

• To provide the membership you asked for — performance of a contract.
• To keep the reservation list and tell you when VYRON opens — consent, which you withdraw by asking.
• To run the community safely, including moderation records — legitimate interests, and in places a legal obligation.
• To answer your questions through support or the chat assistant — legitimate interests.
• To keep financial records once there are payments — legal obligation.

Your data is never sold, and never passed to advertisers. The business model is subscriptions, which is the only reason that promise is cheap to keep.

These are the services VYRON actually uses. Each is a processor acting on instruction, and each needs a data processing agreement before launch — part of the pending review.

• Supabase — the database, accounts and file storage. Confirm the project region before launch; it was requested in the EU.
• Cloudflare — serves the website and runs the chat, Telegram and Instagram endpoints.
• Anthropic — powers the chat assistant and the Telegram and Instagram assistants. What you type into any of them is sent to Anthropic to generate the reply. Do not put anything confidential into it.
• Telegram — if you use the Telegram bot, Telegram carries those messages and its own privacy terms apply to them.
• Meta (Instagram) — if you message the Instagram assistant, Instagram carries those messages and its own privacy terms apply to them.
• Resend — sends the emails VYRON sends you.
• Stripe — will handle payments when membership opens. VYRON never sees or stores your card details.

If you message the bot, your recent messages are kept for one hour so it can follow a conversation, then they expire automatically. Your answers to the five questions, your Telegram username and your chat id are stored until you ask for them to be removed.

In a group chat the bot only receives messages that mention it or begin with a slash command. It does not read everything in the room.

Direct messages sent to @adamrupisan — the Instagram account of VYRON co-founder Adam Rupisan — may be answered by an automated assistant. It tells you so in its first reply. It reaches those messages through Instagram's official messaging API, with Adam's permission, and it sees nothing else on his account or on yours.

What it holds: the id Instagram uses to identify you to that account, your Instagram name and username as Instagram shares them with it, and what you write. If you choose to give them, also your answers to the five questions and your email address. Your recent messages are kept for at most one day, then expire automatically. Your answers and email are stored with the reservation list until you ask for them to be removed.

What you write is sent to Anthropic to generate the reply. When the assistant cannot help, it passes the conversation to Adam, who answers you himself.

To have it deleted: email Vyronsociety@gmail.com with your Instagram username and ask. Everything the assistant holds about you is removed, and you get a reply confirming it. The conversation itself is held by Instagram, not VYRON — you can delete it in the app.

Reservation entries are kept until VYRON opens and you decide, or until you ask to be removed.

Community posts are soft-deleted rather than erased, so that moderation decisions can be reviewed and appealed. How that interacts with the right to erasure needs a ruling from the lawyer, and this paragraph will change when it has one.

Financial records are kept for as long as tax law requires, which is usually longer than any other rule here.

• A copy of everything held about you.
• Correction of anything wrong.
• Deletion, subject to the retention rules above.
• A portable export.
• Withdrawal of consent, at any time, where consent was the basis.
• An objection to processing based on legitimate interests.

Write to Vyronsociety@gmail.com. There is no form and no fee. If you are not satisfied you can complain to a supervisory authority; which one depends on where VYRON is established, which is not yet settled.

Some processors above operate outside the EEA. Where that happens, transfers rely on the mechanisms those providers offer, and confirming each one is part of the pending review rather than something this draft should assert.

VYRON is not for anyone under 18 and does not knowingly hold data about children. If you believe a minor has registered, write and it will be removed.