Privacy Policy

By using the Service and/or paying for access to it, the User consents to processing of their personal data under this Policy. If the User disagrees with these terms, they must stop using the Service. Consent to site visit statistics is given separately — by clicking “Accept” in the cookie notice (section 6).

Processing is carried out on the basis of the Constitution of the Russian Federation, the Civil Code, Federal Law No. 152-FZ "On Personal Data", Federal Law No. 63-FZ "On Electronic Signatures", Federal Law No. 54-FZ "On the Use of Cash Registers", and other applicable Russian regulations on personal data protection.

The Operator processes the following data:

• Telegram account data: ID and username, first name, interface language, Telegram Premium flag, details of the bot connection to the account (connection ID and the rights granted to the bot).
• Copies of messages from the private chats the User connected the bot to: message text and attachments, time, chat ID, and the name, username and ID of the counterpart who sent the message (see section 5).
• Payment data: for card payments — the email provided by the User for the electronic receipt; payment metadata (plan, amount, status, date). The card number, expiry date and CVV/CVC are never requested by, transmitted to, or stored by the Operator — entry and processing of this data happens exclusively on the T-Bank payment system side.
• Source information: the tag of the link through which the User opened the bot (ad campaign, site page, another User's invitation).
• Service usage information: the fact that the bot was triggered (without message content) and the User's actions in the bot — opening the payment screen, choosing a plan and payment method, paying.
• Site visitor data: cookies and visit statistics (section 6).

Data is processed to: identify the User and provide access to the Service; keep copies of messages and show the User deleted and edited messages; issue and record payments and generate electronic receipts under 54-FZ; send subscription status notifications and service announcements; record invitations and determine the source the User came from; analyse the use of the Service and the site in anonymised form to improve them; respond to support requests.

The Service works through Telegram's official mechanism — the “Telegram Business” section. After the User connects the bot in Telegram settings themselves, Telegram passes the bot the messages from the private chats the User granted access to. Groups, channels and secret chats are not available to the bot; messages received before the connection are not passed on.

Message text is kept for 30 days and attachments for 5 days from receipt and are then deleted automatically, without any request from the User (cleanup runs once a day). They are used only to show the User the original message if it was deleted or edited: notifications arrive in the User's private chat with the bot, and the bot sends nothing to counterparts. The Operator does not use message content for advertising and does not share it with third parties.

The copies contain data of the User's counterparts — name, username and the content of messages addressed to the User. By connecting the bot, the User acts in their own interest and is responsible for the lawfulness of keeping messages addressed to them; the Operator processes this data on the User's instruction and only for the purposes stated in this Policy. The bot can be disconnected at any time in Telegram settings — after that no new messages are passed to the bot.

The getamber.ru site uses cookies and the browser's local storage.

• Necessary for the site to work: amber-session and XSRF-TOKEN — session and form protection (up to 2 hours); locale — the chosen language (1 year).
• Traffic source: src (30 days) — where the visitor came to the site from. It lets the “open the bot” button carry a tag, so the Operator can see which sources Users come from.
• Visit statistics — only after clicking “Accept” in the cookie notice. The EnvyCDP analytics service (envycdp.com) is used. It stores an anonymised visitor identifier in the browser and receives information about pages viewed, the referring page address, link tags, device and browser type, IP address, and clicks on the buttons that open the bot. A mark of this consent is kept in the browser's local storage.

Until consent is given, nothing is sent to the analytics service. To opt out of statistics, simply do not click “Accept”; to withdraw consent already given, clear the site data in your browser settings or write to hello@getamber.ru.

Information about the User's actions in the bot (section 3) is sent to the same analytics service in anonymised form: under an internal number, without the Telegram ID, name or username and without message content.

The Operator does not sell personal data and does not share it with third parties for advertising. To run the Service, data is processed with the involvement of:

• Telegram — the messenger the bot works through: messages and notifications pass through its servers;
• T-Bank — card payment acceptance and electronic receipts: email, amount and purchase details;
• the EnvyCDP analytics service — anonymised statistics of site visits and bot usage (section 6).

Data may be disclosed to state authorities in cases expressly provided for by the laws of the Russian Federation.

The Operator applies organizational and technical measures to protect personal data: data between the User and the website/bot is transmitted over an encrypted channel (HTTPS/TLS, Telegram MTProto); access to servers and the database is restricted and logged; payment data is handled separately from the Operator's main database — see section 10.

When paying by card, the User enters card details on the secure payment page of T-Bank, certified under the PCI DSS standard. Card data is transmitted directly between the User's device and T-Bank over an encrypted channel, bypassing the Operator's servers: the Operator has no technical ability to see, receive or store the card number, expiry date or CVV/CVC.

The User may withdraw consent to processing of their personal data at any time, request information about the data processed, request its correction or deletion, by writing to hello@getamber.ru with the subject "Personal data". To stop messages being passed to the bot, it is enough to disconnect it in Telegram settings (Settings → Telegram Business → Chatbots). The User may also contact Roskomnadzor or a court if they believe their rights have been violated.