01What we store
- Your email address and its verification.
- Plan, trial and paid-until dates.
- Payment records as reported by NOWPayments: order reference, network, amount and status. We never see or store a card.
- Your Telegram user id and handle if you connect Telegram.
- API usage counts per day and the time of the last request. Request contents are not stored.
- Sign-in sessions: time, IP address and browser — for your session list and abuse prevention.
- Contact form: we forward your message to our support mailbox and keep only the time, category, your IP and a keyed hash of your address, for 30 days, to limit abuse.
02What we do not do
- No tracking cookies. After you sign in we set one session cookie, and the site keeps a small flag in your browser's local storage (ers_si, the value of your plan) only to show Dashboard / Log out in the menu; it is removed when you log out. Cloudflare, which protects the site, may set its own security cookies (for example __cf_bm or cf_clearance) to tell people from bots.
- No advertising or analytics trackers. Fonts are served from our own server.
- No exchange API keys — we never ask for them.
- No selling or sharing of your data for marketing.
03Why we process it
To run your account and plan, to deliver alerts and API access, to prevent abuse, and to meet accounting duties. The legal basis is performance of our contract with you, and our legitimate interest in keeping the service secure.
04Providers
We use a small number of processors. Each receives only what its job needs.
| Provider | Purpose | Data |
|---|---|---|
| Cloudflare | Edge network, protection, DNS | request metadata, IP address |
| DigitalOcean | Server hosting | all service data, stored on our server |
| Resend | Transactional email | email address, message content |
| Zoho Mail | Support mailbox | messages you send us |
| NOWPayments | Crypto payment processing | invoice, transaction id, amount, order reference |
| Telegram | Channels and bot | Telegram user id |
05Retention
Account data is kept while your account exists and is erased when you delete the account (the Telegram link within 10 minutes). Admin audit records name the account by its internal number, not by its address. Two records outlive deletion: a keyed hash of your address (so a trial is granted only once) and the payment records required by accounting law. Email and sign-in logs are kept for 30 days.
06Your rights
You can view your data in the dashboard, disconnect Telegram, replace your API key and delete your account. For an export or any other request, use the contact form with your account address. We answer within 30 days.
07Security
Sign-in is passwordless by a one-time email link; optional two-factor codes protect sensitive actions. Traffic is encrypted in transit. Keys, codes and sign-in tokens are stored only as hashes. Access to production is limited to the operator.
08Changes
Changes to this policy are announced by email and by a banner at least 7 days before they take effect.