Privacy Policy

1. Introduction

TeleSender ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Chrome extension and related services. Please read this policy carefully to understand our practices regarding your personal data.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Name
• Email address
• Password (stored securely using bcrypt hashing)

2.2 Subscription Information

When you subscribe, we collect:

• Subscription plan and status
• Payment transaction IDs (from Dodo Payments)
• Subscription dates and renewal information

Note: We do not collect or store credit card or payment card information. All payments are processed securely through Dodo Payments.

2.3 Extension Data

The extension stores your working data in your browser using Chrome's storage API. So that you can move between devices and recover after a reinstall, this data is also synchronised to your account on our servers:

• Contacts: Telegram user ID, username, first and last name, phone number where the account exposes one, bot and premium flags, the group or channel the contact came from, and any AI score, segment, industry and reasoning generated for that contact
• Campaigns: name, type, status, configuration, progress counters, statistics and run logs
• Scrape history: which groups or channels you scraped and the results summary
• Settings: extension preferences such as your anti-ban profile

Third-party personal data. Contacts you scrape are personal data belonging to other people. You are the controller of that data and are responsible for having a lawful basis to collect and message them; we process it on your behalf as described in this policy. You can delete it at any time from the extension or by deleting your account.

We never receive your Telegram password. Authentication happens directly between your browser and Telegram.

3. How We Use Your Information

We use the information we collect to:

• Create and manage your TeleSender account
• Process and manage your subscription
• Send transactional emails (payment confirmations, subscription updates)
• Provide customer support
• Improve and optimize our services
• Detect and prevent fraud or abuse
• Comply with legal obligations

4. Data Storage and Security

4.1 Server-Side Data

Account and subscription data is stored on secure servers with:

• Encrypted database connections
• Regular security updates and patches
• Access controls and authentication
• Regular backups

4.2 Client-Side Data

Your working data lives in Chrome's local storage on your device, and a synchronised copy is held against your account on our servers (see section 2.3). Uninstalling the extension clears the local copy; to remove the server copy, delete the data from the extension or delete your account.

All data is transmitted over TLS. Credentials are never written to our logs.

5. Information Sharing

We do not sell, trade, or rent your personal information. We may share your information only in the following circumstances:

• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• With Your Consent: When you explicitly authorize us to share your information

5.1 Sub-processors

These are the third parties that process data on our behalf, and exactly what each one receives:

• Anthropic (Claude API): when you use an AI feature, we send only the content that feature needs — for lead scoring, the contact fields being scored; for message generation and optimisation, your message text and the context you supply. Sent over TLS for the sole purpose of returning that result. Anthropic does not use API data to train its models.
• Dodo Payments: processes your payment. They receive your billing details directly — card and wallet data never reaches our servers. We store only the plan, status and transaction ID.
• Resend: receives your email address and the content of transactional emails we send you.
• Google Analytics 4: receives pseudonymous website usage data — see section 7.
• Vultr: hosts the servers on which the data in section 2 is stored.

We do not sell, rent or trade your personal information, and we do not share it with data brokers or advertising networks.

6. Telegram Integration

TeleSender integrates with Telegram through their official MTProto API. When you connect your Telegram account:

• Authentication is handled directly with Telegram's servers
• Session strings are generated and stored locally in your browser
• We do not have access to your Telegram password
• Scraped data from groups/channels is stored locally on your device
• Messages sent through the extension are transmitted directly to Telegram

7. Cookies and Analytics

Our website uses essential cookies for authentication and session management.

We also use Google Analytics 4 on the tele-sender.com website to understand aggregate usage — pages viewed, sign-ups, and completed purchases. GA4 sets its own cookies and receives a pseudonymous client identifier, your approximate location derived from IP, and your device and browser type. When you complete a purchase we also send the transaction value server-side so the sale can be attributed to the visit. We do not send GA4 your name, email address, contacts, messages or Telegram data.

You can opt out with any standard analytics blocker, with Google's opt-out browser add-on, or by appending ?internal=1 to any page URL, which disables analytics for that browser.

The Chrome extension itself contains no analytics or tracking. It talks only to your own Telegram account and to our API.

8. Your Rights

You have the right to:

• Access: Request a copy of your personal data
• Rectification: Update or correct inaccurate data
• Deletion: Request deletion of your account and data
• Portability: Export your data in a machine-readable format
• Withdraw Consent: Opt out of marketing communications

To exercise these rights, contact us at support@tele-sender.com

9. Data Retention

We retain your account information for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or legitimate business purposes. Payment records may be retained for up to 7 years for tax and accounting purposes.

10. Children's Privacy

TeleSender is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.

12. Chrome Extension Permissions

The TeleSender Chrome extension requests the narrowest set of permissions its features need. Each one, and what it is used for:

• storage: keep your contacts, campaigns, settings and session data in Chrome's local storage on your device
• tabs / activeTab: open and focus the extension's own dashboard and the Telegram Web tab it works in
• alarms: wake the extension to run campaigns you scheduled for later
• clipboardWrite: copy scraped usernames and session strings when you press a Copy button
• declarativeNetRequest (with host access): redirect the legacy Telegram Web layout to the supported one, scoped to telegram.org
• Host access to telegram.org: the extension operates inside Telegram Web. It requests no access to any other website.

The extension does not read the content of any website other than Telegram Web, and does not inject code into unrelated pages.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of the Service after such changes constitutes acceptance of the updated policy.