Privacy Policy

1. Introduction

Telebam (“we”, “us”, “our”) is committed to protecting your personal data in accordance with the Personal Data Protection Act 2012 of Singapore (“PDPA”). This Privacy Policy explains what data we collect, how we use it, and your rights.

2. What We Collect

• Phone number— used for Telegram authentication and account identification
• Session data— session tokens stored in a secure, httpOnly cookie
• Group metadata — group names, member counts, and creation timestamps
• Analytics data — page views, timezone, browser language, referrer
• UTM parameters — campaign tracking data from URLs (utm_source, utm_medium, etc.)
• Billing information — processed and stored by Stripe; we do not store payment card details

3. What We Do NOT Collect

We do not read, store, or process the content of messages sent within Telegram groups created through Telebam. We have no access to your conversations.

4. How We Use Your Data

• To provide and operate the Service (group creation, team management)
• To authenticate your identity via Telegram
• To process billing and manage subscriptions via Stripe
• To analyse usage patterns and improve the Service
• To communicate with you about your account or the Service

5. Third-Party Services

We share data with the following third-party service providers, each governed by their own privacy policies:

• Telegram— authentication and group creation
• Supabase— database hosting and storage
• Stripe— payment processing
• Vercel— application hosting
• Google Analytics — website analytics and traffic measurement

6. Cookies

We use a single essential cookie: telebam_session. This is a secure, httpOnly cookie used solely for authentication. It expires after 30 days of inactivity. We do not use advertising or tracking cookies. Google Analytics may set its own cookies as described in Google’s privacy policy.

7. Data Retention & Deletion

We retain your personal data for as long as your account is active or as needed to provide the Service. Session data is automatically deleted after 30 days. You may request deletion of your account and associated data at any time by contacting us.

8. Your Rights Under the PDPA

Under Singapore’s Personal Data Protection Act, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Withdraw consent for the collection, use, or disclosure of your data
• Request deletion of your personal data

To exercise any of these rights, please contact us at the email address below. We will respond within 30 business days.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Continued use of the Service after changes constitutes acceptance of the revised policy. We encourage you to review this page periodically.

10. Contact

If you have any questions about this Privacy Policy or wish to exercise your data rights, contact us at artificialreply@gmail.com.