Privacy Policy

1. Data we process

Owners: Telegram user id and username, name, language; workspace, plan and payment data; encrypted tokens of connected bots.

Owners' Subscribers: Telegram id, username, name, language, subscription status and payment records — processed on behalf of and for the Owner.

2. Purposes of processing

Providing the Service's features, accepting and recording payments, access control, moderation, user support, and privacy-friendly aggregate analytics.

3. Legal bases

Performance of the contract (offer), legitimate interest in operating and securing the Service, and user consent where required.

4. Payment data

We do not store bank card data. Stars payments go through Telegram; crypto payments through Crypto Pay (@CryptoBot). We store transaction records (payment ids, amounts, currency) for accounting and to prevent double charges.

5. Third parties (processors)

To run the Service we use: Supabase (database hosting), Vercel (app hosting and privacy-friendly web analytics), Telegram (platform and Stars), Crypto Pay/@CryptoBot (crypto payments). Data may be processed on servers outside your country.

We do not sell personal data to third parties.

6. Roles of the parties

For Subscribers' data, the Owner acts as the controller determining the purposes of processing, and TribeSync acts as a processor acting on the Owner's instructions.

7. Security

Bot tokens are stored encrypted (AES-256-GCM), sessions are signed, and incoming webhooks are verified with a secret token. No online service can guarantee absolute security, but we apply reasonable measures.

8. Retention

Data is kept while the account is active and for periods required by law (e.g. accounting). On request, data is deleted unless there is a lawful basis to retain it.

9. Your rights

You may request access to, correction or deletion of your data, and object to processing. To do so, contact us using the details below. EU users have rights under the GDPR.

10. Cookies and analytics

We use technical cookies: NEXT_LOCALE (interface language) and an authentication session cookie. Vercel web analytics is cookieless and does not track you across sites.

11. Minors

The Service is not intended for persons under 18 and is used in accordance with Telegram's rules.

12. Changes to this Policy

We may update this Policy by publishing a new version on the site with the update date.