Privacy Policy

We collect the following categories of personal data:

• Account information — email address, Telegram user ID, display name, and chosen username/nickname.
• Authentication data — OAuth tokens from Telegram or Google used to verify your identity. We do not store your passwords.
• Page content — text, images, links, and other media you upload or create using our page editor.
• Payment information — transaction identifiers, payment method type, and purchase history. We do not store full payment credentials; payment processing is handled by third-party providers.
• Technical data — IP address, browser type, device information, and access timestamps collected automatically via server logs.

We use the collected information for the following purposes:

• Service provision — to create and maintain your account, subdomain, page, and email forwarding.
• Payment processing — to process your purchases and maintain transaction records.
• Customer support — to respond to your inquiries, requests, and complaints.
• Security — to detect, prevent, and address fraud, abuse, and technical issues.
• Service improvement — to analyze usage patterns and improve the functionality and reliability of the Service.
• Legal compliance — to comply with applicable laws, regulations, and legal processes.

Your personal data is stored in a PostgreSQL database hosted on our secured servers. All connections to the database are encrypted using TLS/SSL.

Uploaded media files (images, assets) are stored in Cloudflare R2 object storage, served via encrypted HTTPS connections through Cloudflare's CDN.

We implement industry-standard security measures including encrypted connections, access controls, and regular security assessments to protect your data against unauthorized access, alteration, disclosure, or destruction.

We use the following third-party services that may process your data:

• Cloudflare — DNS management, CDN, DDoS protection, and R2 object storage. Cloudflare may process your IP address and request metadata.
• Crypto Bot — cryptocurrency payment processing via Telegram. Processes transaction data necessary to complete purchases.
• Telegram — OAuth authentication and Telegram Stars payment processing. Receives your Telegram user ID during authentication.
• Google — OAuth authentication. Receives limited profile information (email, display name) during sign-in.

Each third-party service operates under its own privacy policy. We encourage you to review the privacy policies of these services.

We use only essential cookies required for the operation of the Service. These include:

• Session cookies — to maintain your authentication state.
• Security cookies — for Cloudflare Turnstile challenge verification.

We do not use advertising cookies, tracking pixels, or analytics cookies. We do not participate in third-party ad networks.

We retain your personal data for as long as your account is active. If you request account deletion, we will remove your personal data within 30 days, except where retention is required by law or for legitimate business purposes (e.g., transaction records for accounting).

Server logs containing IP addresses and request metadata are retained for a maximum of 90 days for security and debugging purposes, after which they are automatically purged.

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Right of access — you may request a copy of the personal data we hold about you.
• Right to rectification — you may request correction of inaccurate or incomplete data.
• Right to erasure — you may request deletion of your personal data, subject to legal retention requirements.
• Right to data portability — you may request an export of your data in a machine-readable format.
• Right to object — you may object to the processing of your data for specific purposes.
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, please contact us at support@jirniy.com. We will respond to your request within 30 days.

If you are a resident of the European Economic Area (EEA), you are entitled to the protections afforded by the General Data Protection Regulation (GDPR). The legal bases for our processing of your personal data include:

• Contract performance — processing necessary to provide the Service you purchased.
• Legitimate interest — processing necessary for security, fraud prevention, and service improvement.
• Consent — where you have explicitly consented to specific processing activities.
• Legal obligation — where processing is required by applicable law.

You may lodge a complaint with a supervisory authority in your jurisdiction if you believe our processing of your personal data violates the GDPR.

The Service is not intended for individuals under the age of 13. We do not knowingly collect personal data from children under 13. If we become aware that we have collected personal data from a child under 13, we will take steps to delete such information promptly.

If you are a parent or guardian and believe that your child has provided us with personal data, please contact us at support@jirniy.com.

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date above. We encourage you to review this Privacy Policy periodically.

Your continued use of the Service after any changes to this Privacy Policy constitutes your acceptance of those changes.

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us at:

support@jirniy.com