Privacy Policy

Last updated: · This document is provided in English.

This policy explains what personal data tgsoft.app, Dubai Marina, JBR, Dubai, United Arab Emirates ("we") handles when you use tgsoft.app and the tgsoft apps, and why. The short version: your Telegram accounts, sessions and the data you work with stay on your computer (or on your own server with the Android app). Our servers only handle sign-in, licensing and billing.

1. What stays on your device

Telegram sessions, account details, proxies, audience lists, messages, backups and settings you create in the app are stored locally and encrypted where noted in the app. We do not receive them, with one exception you control: the optional encrypted account vault (section 2).

2. What we collect and why

  • Website sign-in (Telegram Login): your Telegram user ID, first and last name, username and profile photo URL. Used to create your website account, deliver downloads and link your purchases to your license.
  • License checks: your license ID, a machine identifier derived from your computer, the IP address of the request and the time. Used to activate the license on one machine, prevent key sharing and abuse, and keep your license working.
  • Purchases: the products and terms you buy, order amounts, currency and payment status. Payments are processed by Cryptomus; we do not receive your wallet's private keys. Blockchain transactions are public by nature.
  • Optional account vault: if you turn it on, the app uploads your account backup encrypted with a passphrase only you know. We store the encrypted data and cannot read it. If you lose the passphrase, we cannot recover it.
  • Server logs: IP address, requested URL, time, browser/app information and a request ID, used for security, debugging and rate limiting.
  • Update checks: the app downloads the update manifest from tgsoft.app, which reveals your IP address to our servers.

3. Services that process data for us

  • Telegram or Google handles the sign-in on the website, whichever you choose.
  • Cryptomus processes payments.
  • Hetzner and Cloudflare host and protect the website; they process IP addresses and request data.
  • Google serves the optional "preferred source" button in the website footer when you use it.
  • AI providers you choose: if you add your own OpenAI or Anthropic key in the app, the app sends the text needed for AI features directly to that provider under your account with them. We do not see it.

We do not sell your personal data, and we do not use it for advertising.

4. Cookies and local storage

The website uses one essential, httpOnly session cookie to keep you signed in, plus short-lived cookies during Telegram sign-in. Your language and theme choice are saved in your browser's local storage. We do not use advertising or tracking cookies.

5. How long we keep data

  • Account and purchase records: while you have an account. When you ask us to delete your account, we delete them, except purchase records the law requires us to keep.
  • License check records: while your license exists. Server logs: rotated automatically and kept only for a short time, usually a few days.
  • Encrypted vault data: until you delete it or ask us to.

6. Legal bases (where GDPR or similar laws apply)

Performing our contract with you (sign-in, licensing, delivery), legal obligations (accounting records), and our legitimate interest in keeping the Service secure and preventing abuse (logs, license checks).

7. Your rights

Depending on where you live, you can ask to access, correct, export or delete your personal data, or object to some processing. Open a support ticket or reach us on Telegram (see the contact page); we answer within 30 days. You can also complain to your local data-protection authority.

8. International transfers

Our servers are hosted by Hetzner in the European Union and served through Cloudflare's global network. Where data moves across borders, we use the safeguards the law requires.

9. Children

tgsoft is not intended for anyone under 18, and we do not knowingly collect their data.

10. Changes

We will update this page when our practices change. The date at the top shows the latest version.

11. Contact

Data controller: tgsoft.app, Dubai Marina, JBR, Dubai, United Arab Emirates. Privacy questions: open a support ticket or reach us on Telegram via the contact page.