Privacy Policy
Last updated: 1777210300
VinciNFT (the “Service”) is a free Telegram bot and companion dashboard for blue-chip NFT market monitoring. We collect the minimum amount of data required to deliver notifications you explicitly subscribed to.
1. What we store
- Your Telegram user ID (UID): used to deliver private messages. We do not store your phone number, first/last name, username or profile picture.
-
Your subscription list: the NFT collection slugs you chose
with
/add. - Your preferences: language, timezone, optional quiet hours, and optional pause-until timestamp.
- Timestamps: when you first started the bot, and when you last interacted with it.
- Aggregate market statistics (hourly per collection). These are derived from public OpenSea data and are not tied to any user.
- Dashboard visits: SHA-256 hashes of visiting IP addresses with a daily-rotating salt, URL path and referer host. Raw IPs are never written to disk.
2. What we do not store
- Wallet addresses or signatures from users.
- Raw IP addresses or device fingerprints.
- Any Telegram data beyond the numeric UID.
- Third-party analytics, cookies or pixels.
3. Data use
Stored data is used solely to operate the Service: pushing you the notifications you asked for, remembering your settings between sessions, and compiling aggregate usage statistics to help us improve the bot. We do not sell or share personal data with any third party.
4. Deleting your data
Send /remove all to clear every subscription. To delete every
trace of your UID (preferences, subscriptions, pro waitlist), simply block
the bot in Telegram — we will mark your record inactive and will no longer
write any data for your UID. You may also email
privacy@vincinft.com for a manual hard-delete.
5. Third-party data
Floor, listing and sale data is sourced from OpenSea's public v2 API. USD price estimation is sourced from Coingecko. We cache both for a few minutes; no user identifier is ever passed to those providers.
6. Security
Data is stored in SQLite files with restricted filesystem permissions on our VPS, served over HTTPS. There are no user logins, passwords, API keys or financial data.
7. Changes
We may update this policy. Material changes will be posted here and announced via the bot.
Questions? Message the bot or email hello@vincinft.com.