[{"data":1,"prerenderedAt":209},["ShallowReactive",2],{"legal-en-privacy":3},{"title":4,"summary":5,"effective":6,"sections":7},"Privacy Policy","What personal data TelePong collects from agencies, their team members and the fans they talk to, why it is processed, who it is shared with, how long it is kept, and what rights you have. Includes the cookie notice for telepong.com and app.telepong.com.","2026-10-22",[8,18,49,81,93,110,115,131,137,144,150,193,198,203],{"id":9,"title":10,"blocks":11},"scope","1. Scope and our two roles",[12,13,14],"This policy explains how TelePong LLC (“we”, “us”, “TelePong”) handles personal data in connection with the website telepong.com, the application app.telepong.com, the TelePong Telegram bots and the browser extension (together, the “Service”).","We act in two different roles, and it matters which one applies to you:",{"list":15},[16,17],"**As a controller** for the data of website visitors, of the people who sign in to the Service (workspace owners, managers, chatters and other team members), and for billing, security and support records. The rest of this policy describes that processing.","**As a processor** for the data of Fans — the people who message the Telegram and OnlyFans accounts that an agency manages through TelePong. The agency (our Customer) decides why and how that data is processed; we process it only on the agency’s instructions under the [Data Processing Addendum](\u002Flegal\u002Fdpa). If you are a Fan, section 10 explains how to exercise your rights.",{"id":19,"title":20,"blocks":21},"data-we-collect","2. What we collect",[22,24,25,27,28,30,31,33,34,36,37,39,40,42,43,45,46,48],{"h":23},"Sign-in and profile data","When you sign in with Telegram Login we receive the data Telegram shares: your Telegram ID, first and last name, username, profile photo and the authorisation timestamp. We never receive your Telegram password, phone number or one-time codes through sign-in. If you add a passkey, we store the public key and a credential identifier — never the private key, which stays on your device. Your interface language and other preferences are stored with your profile.",{"h":26},"Workspace and team data","The name and settings of the workspace, your role and permissions, invitations, shift schedules and working-time records, notification preferences, templates, notes, tags and rules you create, and the actions you take in the Service (for example sending, editing or deleting a message, uploading a file, changing a setting), which are kept as an activity log visible to the roles the workspace owner chooses.",{"h":29},"Connected Accounts","To link a Telegram account the owner enters its phone number, the code Telegram sends and, where enabled, the two-factor password; these are used once to create a session and are not stored except for the resulting session, which is kept under access controls. We also store the account’s profile (name, username, photo), a stable device profile presented to Telegram, the proxy server you assign, health and restriction status, and for OnlyFans accounts the session established through the browser extension and the public profile data of that account.",{"h":32},"Fan data (processed for the agency)","Messages and media exchanged with Connected Accounts, Fan profiles (name, username, photo, language, biography, stories and profile media that Telegram or OnlyFans make available), payment and purchase history, notes, tags and lists the team keeps, contact details Fans share in chat (which we mask from some roles), reactions, call records, and clicks on tracking links including the approximate location and device derived from the request. We do not create accounts for Fans and do not contact them for our own purposes.",{"h":35},"Content you upload","Media in the vault, posters and thumbnails we generate, edited versions, voice samples used for voice synthesis, and the technical metadata of files. Location and device metadata (EXIF) is removed from photos at upload.",{"h":38},"Billing data","Workspace billing history, invoices from our cryptocurrency payment partner, the wallet or transaction identifiers of your payments, referral codes and credit, promotional discounts and the number of connected accounts billed. We never see card numbers; we do not accept cards.",{"h":41},"Technical and security data","IP address, browser and device information, request timestamps, error and performance logs, security events (failed sign-ins, suspicious requests, screenshot-attempt signals from the content-protection layer, Content-Security-Policy reports), the result of the anti-bot check at sign-in, and the heartbeats that keep connections and shifts alive.",{"h":44},"Support communications","What you write to us by email or Telegram, and the context needed to help you.",{"h":47},"Analytics and cookies","See section 11.",{"id":50,"title":51,"blocks":52},"purposes","3. Why we process it and on what basis",[53,80],{"table":54},{"head":55,"rows":58},[56,57],"Purpose","Legal basis (GDPR \u002F UK GDPR)",[59,62,65,68,71,74,77],[60,61],"Providing the Service: signing you in, running your workspace, syncing Connected Accounts, storing content, delivering messages, recording payments, showing analytics","Performance of the contract with the Customer; for team members, our legitimate interest in providing the Service the Customer asked for",[63,64],"Billing, invoicing, referral credit, preventing payment fraud","Performance of the contract; legal obligation (accounting, tax); legitimate interest",[66,67],"Security: protecting accounts and sessions, detecting abuse, bots and attacks, keeping audit logs, enforcing our policies","Legitimate interest; legal obligation",[69,70],"Automated features you switch on: translation, transcription, detection of payment details and risky content, auto-replies, voice synthesis","Performance of the contract (on the Customer’s instructions)",[72,73],"Service messages: important notices about your workspace, payments, incidents and policy changes","Performance of the contract; legitimate interest",[75,76],"Improving the Service: aggregated usage statistics, product analytics with consent, error diagnostics","Legitimate interest; consent where cookies or similar identifiers are used",[78,79],"Responding to legal requests, complaints and takedown notices; establishing or defending legal claims","Legal obligation; legitimate interest","We do not use personal data for automated decisions that produce legal or similarly significant effects on you, and we do not sell personal data.",{"id":82,"title":83,"blocks":84},"ai","4. Machine translation, transcription and other AI features",[85,86,92],"Several features use machine-learning models. Where a model runs on our own infrastructure, the data stays with us. Where a third-party provider is used, we send only the text or audio needed for that request and rely on the provider’s commercial terms, under which inputs are not used to train the provider’s models by default; provider-side abuse monitoring and short-term retention may still apply.",{"list":87},[88,89,90,91],"**Translation** of messages: a translation model hosted by us, or DeepL (DeepL SE, Germany) and Anthropic (Anthropic PBC, USA) when the hosted model is unavailable or the workspace chooses a cloud provider.","**Voice message transcription**: a speech-recognition model hosted by us.","**Voice synthesis**: a text-to-speech model hosted by us, trained on voice samples the Customer uploads with the speaker’s consent.","**Content and payment-detail detection** in outgoing messages: rule-based and model-based checks that run on our infrastructure.","Outputs of these features are shown to the team as drafts or signals; a person remains responsible for what is sent or published.",{"id":94,"title":95,"blocks":96},"sharing","5. Who we share data with",[97,98,109],"We share personal data only with the following categories of recipients, and only as needed:",{"list":99},[100,101,102,103,104,105,106,107,108],"**Telegram and OnlyFans** — every message, post, call or payment you initiate through a Connected Account is transmitted to the relevant Platform under its own privacy terms. Sign-in itself goes through Telegram.","**Infrastructure providers** — servers hosted in the European Union (Hetzner Online GmbH, Germany); object storage, content delivery, DDoS protection and the anti-bot check (Cloudflare, Inc.); the Redis and PostgreSQL databases run on our own servers.","**AI providers** listed in section 4, for the specific requests sent to them.","**Payment partner** — our cryptocurrency payment processor receives the amount, currency and workspace reference needed to create and confirm an invoice; it never receives Fan data.","**Analytics** — Google Analytics 4 (Google Ireland Ltd.) and PostHog (PostHog Inc., EU cloud), only after you accept analytics in the cookie banner; see section 11.","**Other providers** — GIF search (GIPHY, Inc.) receives the search terms you type; web fonts on the marketing site are loaded from Google Fonts, which sees your IP address.","**Proxy servers** you configure for a Connected Account carry that account’s traffic to Telegram; choose providers you trust.","**Authorities and other parties** — when the law requires it, to respond to a valid legal request, to protect the rights, safety or property of Fans, team members, us or others, or to report suspected exploitation of minors or trafficking to the competent authorities.","**A successor** in a merger, acquisition or sale of assets, under commitments at least as protective as this policy.","The current list of sub-processors for Fan data, with locations, is in the [Data Processing Addendum](\u002Flegal\u002Fdpa).",{"id":111,"title":112,"blocks":113},"transfers","6. International transfers",[114],"Our primary servers are in the European Union. Some providers (for example Anthropic, Cloudflare, Google, GIPHY) process data in the United States or other countries. Where data leaves the EEA or the UK we rely on an adequacy decision, the European Commission’s Standard Contractual Clauses and the UK Addendum, or another lawful transfer mechanism, together with the providers’ own safeguards. Copies of the relevant clauses are available on request.",{"id":116,"title":117,"blocks":118},"retention","7. How long we keep data",[119,120,130],"We keep personal data only as long as needed for the purposes above, and then delete or anonymise it. In particular:",{"list":121},[122,123,124,125,126,127,128,129],"**Your account** — while it exists. When you delete your account it is deactivated immediately and permanently deleted after 30 days; the grace period lets you undo an accidental deletion.","**A workspace** — while it is active or suspended for non-payment. When the owner deletes it, a short grace period of 3 days applies during which the deletion can be cancelled; the workspace and its content are then removed from live systems.","**Connected Account sessions** — until the account is disconnected, the session is revoked by the Platform, or the workspace is deleted.","**Messages and Fan data** — for as long as the workspace keeps them. Media mirrored from Telegram that was deleted in Telegram is removed from our storage within about 60 days; chat uploads and cached media have a shorter configured retention. Link-click records are kept for the retention period set for the workspace.","**Voice models and samples** — until the Customer deletes them or the workspace is deleted.","**Billing records** — for the period required by accounting and tax law.","**Technical logs and security events** — typically up to 90 days, longer only while an incident or investigation is open.","**Backups** — encrypted backups are rotated on a fixed schedule; deleted data disappears from backups when the backup that contains it expires.","Where the law requires us to keep certain records longer (for example to respond to a legal claim or a report of illegal content), we keep only what is needed and restrict access to it.",{"id":132,"title":133,"blocks":134},"security","8. Security",[135,136],"We protect data with technical and organisational measures appropriate to the risk: encryption in transit (TLS) for every connection; access controls and role-based permissions inside workspaces; signed and time-limited requests between the application and our servers; passkey (WebAuthn) sign-in; a strict Content-Security-Policy; isolation of Connected Account sessions; per-viewer watermarks and screenshot-attempt alerts for protected media; removal of location metadata from uploads; audit logs; monitoring and alerting; regular encrypted backups stored separately from production; and limited, logged staff access.","No system is completely secure. Keep your Telegram account protected with two-step verification, add a passkey, give team members only the permissions they need, and tell us promptly if you suspect unauthorised access.",{"id":138,"title":139,"blocks":140},"rights","9. Your rights",[141,142,143],"Depending on where you live, you may have the right to access the personal data we hold about you, to have it corrected or deleted, to restrict or object to processing, to data portability, to withdraw consent where processing is based on consent, and to complain to your data-protection authority.","To exercise a right, write to [privacy@telepong.com](mailto:privacy@telepong.com) from the contact details linked to your account, or use the account and workspace deletion controls in the application. We answer within one month, or tell you if we need longer. We may ask you to confirm your identity first.","Team members: because your workspace owner decides what is kept in the workspace (for example your activity log), requests about workspace records should go to the owner; we will help them respond.",{"id":145,"title":146,"blocks":147},"fans","10. If you are a Fan",[148,149],"If you have messaged a creator whose account is managed through TelePong, the agency running that account is the controller of your data. Please contact the agency or creator you dealt with to access, correct or delete your data, or to object to its processing.","If you cannot reach them, or if you believe content involving you is being used without your consent, write to [privacy@telepong.com](mailto:privacy@telepong.com) (data requests) or [abuse@telepong.com](mailto:abuse@telepong.com) (illegal or non-consensual content). We will forward your request to the agency and, where the law requires it or the agency does not respond, act on it ourselves. Our [Complaints & Takedown](\u002Flegal\u002Fcomplaints) policy describes the procedure and timelines.",{"id":151,"title":152,"blocks":153},"cookies","11. Cookies, local storage and analytics",[154,155,192],"We use a small number of cookies and browser-storage entries. Strictly necessary ones are always set; analytics are off until you accept them in the banner, and until then analytics runs in a cookieless, anonymised mode.",{"table":156},{"head":157,"rows":161},[158,159,56,160],"Name","Where","Type \u002F lifetime",[162,167,172,176,180,184,188],[163,164,165,166],"i18n_redirected","telepong.com","Remembers the language you chose","Necessary · 1 year",[168,169,170,171],"tp_consent","telepong.com, app.telepong.com","Stores your analytics choice (accepted \u002F essential only)","Necessary · localStorage, until you change it",[173,174,175,166],"telepong_locale","app.telepong.com","Interface language of the application",[177,174,178,179],"Session tokens, device secret","Keep you signed in and sign each request to our servers","Necessary · localStorage, until sign-out",[181,169,182,183],"Cloudflare cookies (e.g. cf_clearance, __cf_bm)","Bot protection and the sign-in challenge","Necessary · up to 30 minutes–1 year",[185,169,186,187],"_ga, _ga_*","Google Analytics 4 — understanding how the site and application are used","Analytics · with consent · up to 2 years",[189,174,190,191],"ph_*","PostHog product analytics — which features are used, where users get stuck","Analytics · with consent · up to 1 year","You can change your choice at any time from the cookie banner (it reappears if you clear site data) or by deleting the stored choice in your browser. Blocking the necessary entries will prevent sign-in.",{"id":194,"title":195,"blocks":196},"children","12. Children",[197],"The Service is for business use by adults. We do not knowingly collect personal data from anyone under 18 as a user of the Service. Our Customers are required to ensure that every person appearing in their content is an adult and to stop any interaction with a Fan who turns out to be a minor. If you believe a minor is involved in any way, report it to [abuse@telepong.com](mailto:abuse@telepong.com).",{"id":199,"title":200,"blocks":201},"changes","13. Changes to this policy",[202],"We will post changes on this page and update the effective date. Material changes are also announced in the application or by message to the workspace owner before they take effect.",{"id":204,"title":205,"blocks":206},"contact","14. Contact",[207,208],"Controller: TelePong LLC.","Data-protection requests: [privacy@telepong.com](mailto:privacy@telepong.com). Other legal questions: [legal@telepong.com](mailto:legal@telepong.com).",1792739658019]