Privacy Policy

Effective date: 15 August 2026

This Privacy Policy explains what personal data PayChest processes and why. PayChest is operated by the operator of PayChest, which acts as the data controller for the processing described here. Contact: support@paychest.app.

1.What we collect

From Telegram

When you open the Mini App or use the bot, Telegram provides us with your Telegram user ID, first/last name, username and language (and, if you set one, your profile photo), plus whether you have allowed the bot to message you. We use this to identify your account and run the service.

Creator profile

If you become a creator: your display name, bio, avatar and cover images, chosen category and goals, and the ID and title of the channel or group you connect for subscribers.

Wallets & transactions

Your payout wallet address(es), the buyer wallet address captured on-chain when a payment is verified, and order data (amounts, currency, network, timestamps, transaction hashes, and status). See §4 about the public nature of on-chain data.

Content you upload

Digital-product files and offer details you provide, stored so we can deliver purchases and review content for policy compliance.

Technical

Basic technical data needed to operate and secure the service (e.g. server logs). We do not use third-party advertising trackers.

Cookies

The Mini App and bot do not use tracking cookies. The creator web app sets a single essential, httpOnly session cookie to keep you signed in — we use no advertising or third-party tracking cookies.

2.How we use it

• to provide the service — storefronts, checkout, on-chain payment verification, delivering access and files, subscriptions, the catalog and TOP placement;
• to bill and manage paid features (Pro, TOP);
• to moderate content and prevent fraud, abuse and illegal use;
• to provide support and important service notices;
• to comply with legal obligations.

Where the GDPR or similar laws apply, our legal bases are: performance of a contract (running the service you use), our legitimate interests (security, moderation, preventing abuse), consent where we ask for it, and legal obligation.

3.Who we share it with

We do not sell your personal data. We share only as needed to run PayChest:

• Telegram — the platform PayChest runs on, under Telegram’s own terms and privacy policy;
• Blockchain networks and public node providers (e.g. TON, TronGrid, BSC RPC) — to build and verify payments; on-chain data becomes public (see §4);
• Wallet connection tools (e.g. TON Connect, WalletConnect) — to let you connect a wallet and sign transactions;
• Hosting and infrastructure providers — to run our servers and store data;
• Authorities — where required by law.

Between a creator and their buyers, some information is shared by design: a creator sees that a purchase occurred and related order details; a buyer sees the creator’s public profile.

4.On-chain data is public and permanent

5.Retention & security

We keep personal data for as long as your account is active and as needed for the purposes above, then delete or anonymise it, except where we must keep it longer to meet legal obligations or resolve disputes. On-chain data cannot be deleted. We use reasonable technical and organisational measures to protect data, but no online service can be guaranteed perfectly secure. If a data breach occurs that is likely to put your rights and freedoms at high risk, we will notify affected users without undue delay.

6.Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict or object to processing of your personal data, and to data portability. To exercise these, contact support@paychest.app. Note that we cannot alter data recorded on a blockchain, and some data must be kept to run the service or meet legal duties. If a request concerns a creator you bought from (or a buyer), we may direct you to that party where they control the relevant data.

7.Children

PayChest is not intended for anyone under 18 (or the age of majority where they live), and we do not knowingly process their data.

8.International transfers & changes

Your data may be processed in countries other than yours, including where our providers operate; where required we rely on appropriate safeguards. We may update this Policy; the “effective date” shows the latest version.

9.Contact

Privacy questions or requests: support@paychest.app. See also our Terms of Service.