Privacy Policy

1. Overview

This Privacy Policy explains how 18Bot ("we", "us") collects, uses, and protects information when you use our website, Telegram bots, and related services (collectively, "the Service").

2. Information We Collect

• Account info: email, display name, avatar, and OAuth provider IDs (Google, Discord, Telegram).
• Usage data: jobs you create, inputs you upload, generated outputs, credit balance, and timestamps.
• Technical data: IP address, approximate country (derived from IP), device type, and browser headers.
• Payments: transaction metadata from our payment partners (CryptoBot, NowPayments, Telegram Stars, Binance Gift Card). We do not store full card or wallet credentials.

3. How We Use Information

• Operate and improve the Service.
• Process AI generation jobs and deliver results to you.
• Process payments and credit purchases.
• Detect and prevent fraud, abuse, or violations of our Terms.
• Send transactional notifications (job status, payment receipts).
• Comply with legal obligations.

4. Generated Content

Inputs you upload and outputs we generate are stored on our servers and third-party object storage (e.g., Cloudflare R2) for as long as needed to deliver the Service. You may request deletion of your account and associated content at any time via your dashboard.

5. Sharing of Information

We do not sell your personal data. We share information only with:

• Infrastructure providers that host our servers, storage, and CDN (e.g., Cloudflare).
• AI inference providers that process your generation jobs.
• Payment providers that process your purchases.
• Authorities when required by law or to protect our rights.

6. Cookies & Sessions

We use first-party cookies to keep you signed in and to remember your preferences. We do not use cross-site advertising trackers.

7. Your Rights

You may request access, correction, or deletion of your personal data, and you may export your data, by contacting us via the support channels on our homepage. Where applicable, you have the right to lodge a complaint with your local data protection authority.

8. Data Retention

We retain your account and content while your account is active. After account deletion, we remove personal data within 30 days, except where we are required to retain certain records for legal or accounting purposes.

9. Children

The Service is not intended for anyone under 18. We do not knowingly collect data from minors. If you believe a minor has used the Service, please contact us so we can remove their data.

10. Changes

We may update this Privacy Policy from time to time. Material changes will be announced on the site. Continued use of the Service after changes constitutes acceptance of the updated Policy.

11. Contact

For questions about this Privacy Policy, reach us through the support channels listed on our homepage or via our official Telegram bot.