Privacy Policy

1. Introduction

This Privacy Policy describes how KCS Creations ("we", "us", "our"), operating the TGpost platform at tgpost.app, collects, uses, discloses, and safeguards your personal information.

Our registered office is at A 1503, Plot No. GH02, Sector 107, Noida, Gautam Buddha Nagar, Uttar Pradesh – 201301, India.

2. Information We Collect

a) Information you provide

• Account information: name, email address, and password when you register.
• Telegram bot tokens: provided during channel connection. Tokens are encrypted with AES-256-GCM before storage and are never stored in plain text.
• Payment information: billing details are collected and processed by our third-party payment processors (Razorpay, NOWPayments). We do not store credit card or bank account numbers.
• Content: posts, templates, media files, and messages you create within the platform.
• VIP group member data: member names, Telegram usernames, email addresses (if provided by the member), and membership status.

b) Information collected automatically

• Usage data: pages visited, features used, timestamps, and actions performed.
• Device information: browser type, operating system, and screen resolution.
• IP address: collected for security and fraud prevention.
• Cookies: session cookies for authentication. We do not use third-party tracking cookies.

c) Information from third parties

• Telegram API: channel names, subscriber counts, and group membership events received via bot webhooks.
• Payment processors: transaction status and payment confirmation (no card details).

3. How We Use Your Information

• To provide, operate, and maintain the Service
• To process payments and manage subscriptions
• To send scheduled posts and execute bot actions on your behalf
• To generate channel analytics and performance reports
• To send transactional emails (account verification, password resets, membership notifications)
• To provide customer support
• To detect and prevent fraud, abuse, and security threats
• To comply with legal obligations

4. Disclosure of Information

We do not sell your personal information. We may share your data with:

• Service providers: Supabase (database hosting), Vercel (application hosting), Resend (transactional email), Razorpay and NOWPayments (payment processing) — only to the extent necessary to operate the Service.
• Telegram: bot API calls to execute your requested actions (posting, invite links, etc.).
• Law enforcement: if required by law, court order, or governmental authority.
• Business transfer: in the event of a merger, acquisition, or sale of assets, your data may be transferred to the successor entity.

5. Data Security

We implement industry-standard security measures to protect your data:

• Bot tokens are encrypted at rest using AES-256-GCM
• All data in transit is encrypted via HTTPS/TLS
• Database access is restricted to authenticated service roles
• Passwords are hashed using bcrypt (via Supabase Auth)
• Webhook endpoints verify cryptographic signatures (HMAC-SHA512 for payments, secret token for Telegram)

While we strive to protect your data, no method of transmission or storage is 100% secure. You are responsible for maintaining the security of your account credentials.

6. Data Retention

• Account data is retained for as long as your account is active.
• If you delete your account, we will delete your personal data within 30 days, except where retention is required by law.
• Payment records are retained for 7 years as required by Indian tax regulations.
• Aggregated, anonymised analytics may be retained indefinitely.

7. Your Rights

Under the Information Technology Act, 2000 and applicable Indian laws, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data (subject to legal retention requirements)
• Withdraw consent for data processing

To exercise these rights, email us at Support@tgpost.app. We will respond within 30 days.

8. Cookies

We use essential cookies for authentication and session management. These are strictly necessary for the Service to function. We do not use advertising or analytics cookies from third parties.

9. Children's Privacy

TGpost is not intended for users under the age of 18. We do not knowingly collect personal information from minors. If we become aware that we have collected data from a minor, we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or in-app notification. Continued use of the Service after changes constitutes acceptance.

11. Grievance Officer

In accordance with the Information Technology Act, 2000 and the rules made thereunder, the Grievance Officer for the purpose of this Privacy Policy is:

KCS Creations
A 1503, Plot No. GH02, Sector 107, Noida, Gautam Buddha Nagar, Uttar Pradesh – 201301, India
Email: Support@tgpost.app
Phone: +91 84486 03206