Datenschutzerklärung / Privacy Policy

Last updated: [Date]

1. Controller

[Name], [Address], [Email]. The controller within the meaning of the GDPR is the natural person listed in the Impressum.

2. What data we collect

• Telegram user data: user ID, first name, last name, username, language. Collected when you interact with a bot managed through VX0D.
• Payment data: Telegram Stars transaction IDs, amounts, timestamps. We do not process credit cards or bank details.
• Form responses: answers submitted through channel-owner forms. This data is controlled by the channel owner, not by VX0D.
• Technical data: IP address (for webhook verification and audit logs), timestamps, browser user-agent (admin panel only).

3. Purpose and legal basis

• Contract performance (Art. 6(1)(b) GDPR): managing access to channels/groups.
• Legitimate interest (Art. 6(1)(f) GDPR): security, fraud prevention, audit logging.
• Legal obligation (Art. 6(1)(c) GDPR): tax and accounting records.

4. Data processors

• Hetzner Online GmbH — server hosting (Falkenstein, Germany).
• Telegram Messenger Inc. — bot platform, payment processing.
• Stripe Inc. — platform subscription billing (if applicable).

5. Data retention

Account data: retained while account is active + 30 days after deletion. Payment records: 10 years (German tax law, §147 AO). Form responses: configurable by channel owner, maximum 2 years. Audit logs: 1 year.

6. Your rights

You have the right to: access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20), objection (Art. 21). Use the /mydata command in any VX0D bot or contact us at [email].

7. Right to complain

You may lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement.

8. No automated decision-making

We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR.