Privacy policy

01General provisions

This policy describes what data BadPanda receives from users of the Telegram bot and visitors to this website, why it processes that data, and how it protects it.

Processing is carried out by the entity named in the “Company details” section of the public offer. The policy covers the bot and this website; it does not cover third-party services linked from these pages.

02What data we receive

The photos and videos you send to the bot, and the results of processing them.

Your Telegram account identifier and interface language — needed to deliver the result to the right chat and to reply in a language you understand. The bot does not request your phone number or contacts.

Render records: the time of the request, the feature chosen, the completion status and the remaining pack balance. This data is needed to account for deductions and to investigate support requests.

Payment records: the fact, amount and date of a payment. Card details are never passed to the service — payment is handled by the payment provider or through Telegram Stars.

03Why we process data

To fulfil your request: process the photo and deliver the result to the chat.

To account for renders paid for and used, and to confirm payment.

To answer support requests and investigate technical failures.

To comply with legal requirements — for example, retaining settlement records.

We do not use your photographs to train models and do not build advertising profiles from them.

04Grounds for processing

The grounds for processing photographs and your Telegram identifier are performance of the contract concluded when you accept the public offer, and your consent, which you give by sending a file to the bot.

Consent can be withdrawn at any time: stop using the bot and delete uploaded files with a command in the bot. Withdrawing consent does not undo processing carried out before the withdrawal.

05How long data is kept

Source shots and results are kept for 30 days. The period exists so you can come back to a result and forward it without uploading the photo again. After it expires, files are deleted automatically.

You can delete all files earlier with a command in the bot — deletion is immediate and irreversible.

Settlement records are kept for the period required by accounting legislation. Those records contain no images.

06Who data is shared with

We do not sell photographs and do not pass them to third parties for advertising or any other purposes of our own.

Processing involves contractors without which the service could not run: the compute and storage provider, the payment provider, and the Telegram platform as the message delivery channel. Each receives only the data its function requires and is bound by confidentiality obligations.

Staff access to files is restricted and used only to investigate a support request — and only when you have asked for that yourself.

Data may be disclosed to state authorities where the law requires it.

07Website: cookies and analytics

The website sets no advertising or analytics cookies and uses no third-party trackers. The interface language is determined by the page address, not by cookies.

The web server keeps technical access logs: the request path, the time and the browser type. Logs are used for diagnostics and kept for no longer than 30 days.

08How data is protected

Data travels between you, Telegram and the service over secure channels. Files are held in isolated storage with a restricted circle of access.

No service can guarantee complete security of data transmitted over the internet. Do not send the bot images of documents, bank cards or other information you are not prepared to have processed.

09Your rights

You can find out what data about you is processed, request that it be corrected, deleted or restricted, and withdraw your consent.

The fastest route is a command in the bot: it deletes all uploaded files and results. For other requests, email support with “Personal data” in the subject line.

A request is handled within one business day and the answer arrives through the same channel the request came from. If a request is refused, we explain why.

10Changes to this policy

The current version is always published on this page and its date is shown above. Changes affecting the scope of data collected or retention periods are announced in the Telegram channel before the new version takes effect.

Questions about this policy go to the support email address, listed on the contacts page.