Privacy policy

Summary

We collect what we need to run Nooktap for you, and nothing to sell. We don't sell personal data and we don't show ads in the dashboard.

What we collect

Account: your email address, a hash of your password, your sign-in factors and your language and time zone.

Workspace: your bot's token (stored encrypted), the groups and channels you add, your posts, rules and settings, and the members of your team.

From Telegram, through your bot: messages and member details that the bot receives in your groups, so that moderation, support, rewards and reports can work.

Billing: invoices, payment status and the method used. Card and wallet details stay with the payment provider.

Website: if you accept, Google Analytics measures visits to nooktap.com. Without your consent, no analytics run.

Why we use it

To provide the service you asked for, to keep it secure and stop abuse, to bill you, to answer your support requests, and to meet legal duties.

How long we keep it

Message history is kept for the period your plan allows, then deleted. Account and workspace data are kept while your account is open and deleted after you close it, except billing records the law requires us to keep.

Who we share it with

Service providers that run parts of Nooktap for us: hosting, Cloudflare for files and email, and our payment providers. Each gets only what it needs.

Authorities, when the law requires it.

Security

Bot tokens and other secrets are encrypted. Access between workspaces is checked on every request. Our staff don't read your content unless you ask us to, for a limited time.

Your rights

You can see, correct, export and delete your data. Write to [email protected] and we'll answer within 30 days.

Cookies

The dashboard uses one cookie to keep you signed in. The website stores your analytics choice in your browser and sets analytics cookies only if you accept.

Changes

If we change this policy in a way that matters, we tell you by email or in the dashboard before it applies.