Privacy

No advertising analytics

The public website does not currently use Google Analytics, advertising cookies, cross-site tracking pixels or similar marketing counters. We do not sell personal data or use it to build advertising profiles.

Information the service needs

When a merchant uses GramPayBot, the service stores the Telegram account identifier and basic profile fields supplied by Telegram, project settings, public wallet addresses, invoices, API and webhook settings, billing records and technical security logs. For API security, we also record when an API key was last used and the source IP address. Buyers do not need a GramPayBot account.

Technical cookies and infrastructure

The public marketing website does not set a visitor cookie. The GramPayBot application uses a signed session cookie for login and session security and may store a language-preference cookie. These cookies are not used for advertising or cross-site profiling.

Current hosting and delivery providers include Cloudflare, Netlify and Railway. To deliver and protect the service, they necessarily process request metadata such as IP address, user agent, requested URL, timestamps and network or error information. They may retain this information under their own operational and privacy policies.

Public blockchain information

To check a payment, we process public wallet addresses, token amounts, networks and transaction hashes. This information already exists on public blockchain networks. A transaction may reveal or allow someone to infer that a sender address paid a particular invoice. GramPayBot cannot change or delete a blockchain transaction.

Information we never need

Never send this information to GramPayBot or to anyone claiming to be support.

• wallet seed phrases;
• wallet private keys;
• wallet passwords;
• access to merchant funds.

Storage and contact

We keep service data while it is needed to operate the account, invoices, billing, security and support. Application error logs are automatically removed after 7 days. A merchant can request account-data deletion through support, but public blockchain records cannot be deleted.

Privacy and account requests: @AllGramSupportBot.