Privacy Policy

1. Information We Collect

When you create an account, we collect your email address and name (optional). When you create a store, we store your Telegram bot token and associated bot metadata. When customers place orders, we collect Telegram user IDs, order details, and payment information (processed by third-party gateways).

2. How We Use Your Data

We use your data solely to provide the AIStor service: running your Telegram bots, processing orders, delivering digital products, and sending service-related emails (order confirmations, low-stock alerts, weekly summaries). We do not sell your data or use it for advertising.

3. Third-Party Services

AIStor integrates with the following third-party services to provide its functionality:

• Telegram Bot API — for bot communication and storefront operation
• NOWPayments — for cryptocurrency payment processing
• PayPal — for traditional payment processing

Each service has its own privacy policy. We only share the minimum data necessary for each service to function (e.g., payment amounts with payment processors).

4. Data Retention

Your account data is retained for as long as your account is active. When you request account deletion, your stores are deactivated immediately. After a 30-day grace period, your account is permanently anonymized (email, name, and password are removed). Order records are retained in anonymized form for accounting and fraud prevention.

5. Your Rights (GDPR)

Under the General Data Protection Regulation (GDPR), you have the following rights:

• Right of Access — download all your data from the Account page
• Right to Rectification — update your profile information at any time
• Right to Erasure — request account deletion from the Account page
• Right to Data Portability — export your data in JSON format

6. Cookies

We use a single session cookie to keep you logged in. We do not use tracking cookies, analytics cookies, or any third-party cookies.

7. Security

Passwords are hashed using bcrypt. Bot tokens are stored encrypted at rest. All connections use HTTPS. We follow industry-standard security practices to protect your data.

8. Contact

For privacy-related questions, contact us at privacy@aistor.app.