Privacy Policy
What we hold, who else sees it, and what you can ask us to do about it.
The short version
We hold what running a subscription bot actually requires and nothing more. No third-party analytics, no advertising trackers, no scripts from anybody else's servers — the site's security policy forbids them, which is enforced by your browser, not promised by us. We never sell your data or your subscribers' data, to anyone, for any amount.
What we hold about you, the channel owner
Your Telegram id, username and display name — that is how you sign in, and we ask for no password. The bot you connected and the channels you sell. Your plans, prices and settings. Your invoices and what you paid. An audit record of changes made in your dashboard, with the time and the IP address it came from, so a change nobody remembers making can still be traced.
What we hold about your subscribers
Only what Telegram gives a bot when someone messages it: their Telegram id, username, first and last name, and the language they chose. Then what the subscription itself needs: which plan, when it started, when it ends, whether they are in the channel, and the payments recorded against them. We do not ask for or store an email address, a phone number, a postal address, or card details — card numbers go to your payment provider and never reach us.
Your keys, and why you cannot read them back
The bot token and payment keys you enter are encrypted before they are stored, with keys held outside the database. Once saved, the dashboard shows you only enough to recognise which key it is — never the value, not to you and not to us. If you lose a key, you replace it; nobody here can look it up for you. That is the point.
Cookies
One, and it is the session cookie that keeps you signed in. It is http-only, same-site and sent only over https. It holds no advertising identifier and follows you nowhere. There is no cookie banner because there is nothing to consent to.
Who else sees any of it
Telegram, because the bot is theirs and every message goes through them. Your own payment providers — Stripe, PayPal — for the payments you route through them, under their own privacy policies, and only for your subscribers' payments to you, never for anyone else's. Our hosting provider, which stores the encrypted database. Nobody else: no data brokers, no advertisers, no analytics company.
Tenants cannot see each other
Every row we store carries the account it belongs to, and every query is scoped to the account making it — enforced in the database, not only in the code. A subscriber of yours is not a subscriber of anybody else's, and another channel owner cannot reach your data by guessing an id.
How long we keep things
Your account data for as long as your account is open. Payment and invoice records for as long as accounting and tax rules require, which is longer than the account itself. Audit records for the same reason. A subscriber who leaves keeps a subscription history for as long as you might need to answer a question about it, and you can delete a subscriber from your dashboard.
What you can ask us to do
Ask for a copy of your data and we will send it in a machine-readable form. Ask us to correct something wrong. Ask us to delete your account and we will, keeping only what accounting rules oblige us to keep and telling you what that is. If you are in a place with statutory data rights, those rights apply here whether or not we name them.
If something goes wrong
If data we hold is exposed, we will tell the accounts affected — what happened, what was involved, and what to do — rather than wait to be asked. Where the law sets a deadline for that notice, we treat it as a maximum, not a target.
Changes, and reaching us
The date at the top of this page is when it last changed. If a change affects what we collect or who sees it, we tell you before it takes effect. To ask anything about your data, message the support contact in the footer.