Privacy Policy

Last updated: 10 September 2026

This policy explains what personal data we handle and why. The data controller is [LEGAL ENTITY NAME], [REGISTERED ADDRESS], reachable at privacy@evault.solutions.

What we collect

• Telegram identifiers — your numeric Telegram user id, and your username and display name if you have them set. We receive these from Telegram when you interact with the bot.
• Purchase records — which video was bought, when, the amount, the currency and the payment method type.
• Payment metadata — the reference our payment provider returns and whether the payment succeeded. We never receive or store your full card number.
• Content you upload, if you are a creator, together with the title, description and price you set.
• Technical logs — request timestamps, IP address and error information, kept for security and debugging.

This website sets no cookies and runs no analytics or advertising trackers.

Why we use it, and on what basis

• To perform our contract with you — delivering what you bought, paying creators, providing support, handling refunds.
• To meet legal obligations — keeping accounting and tax records, responding to lawful requests.
• Our legitimate interests — preventing fraud and abuse, keeping the service secure, and enforcing our terms. Where we rely on this, we have weighed it against your interests.

Who we share it with

• Payment providers, to take payment and process refunds.
• Telegram, which delivers every message and file — its own privacy policy applies to your use of Telegram.
• Our hosting provider, Hetzner Online GmbH, on servers located in the European Union.
• Authorities, where we are legally required to disclose.

We do not sell personal data and do not share it for advertising.

How long we keep it

Purchase and payment records are kept for as long as required by accounting and tax law, typically seven years. Technical logs are kept for up to 90 days. Uploaded content is kept until the creator removes it or closes their account, subject to the access already sold.

Your rights

You can ask us to give you a copy of your data, correct it, delete it, restrict how we use it, or provide it in a portable format. You can object to processing based on legitimate interests. Write to privacy@evault.solutions and we will respond within one month.

Some data cannot be deleted on request where we must keep it by law — payment records being the usual example. If you are unhappy with how we handle your data you can complain to the data protection authority in your country.

Security

Data is transmitted over encrypted connections and stored on access- controlled servers in the EU. Access to production systems is limited to those who need it.

Changes

If we change this policy we will update the date above and announce material changes through the bot.