Privacy Policy

1. Scope

This policy applies to @pixoradsbot, the PixorAds Mini App and pixora-ads.com. The PixorAds Administration determines the purposes and means of processing in these resources. Privacy requests are accepted through @pixoradsinfo, @pixorads_support or info@pixora-ads.com.

Telegram, payment providers, banks, external websites and other independent services process data under their own documents. PixorAds receives only the information needed for the relevant feature.

2. Account and technical data

• Telegram ID, name, username, language, account status and settings.
• Telegram Mini App initData, session identifiers and expiry, document acceptance records and CAPTCHA.
• IP address, browser and device type, operating system, request time, technical logs and security events. The relationship graph uses irreversible derivatives instead of raw IP and User-Agent values.
• Where task access is gated, membership-check results for configured PixorAds channels and chats.

3. Task, campaign and communication data

Advertising preferences record a separate user choice, its time, source and consent-text version. Document updates do not override refusal or withdrawal. In the publisher network, a BotFather token is used once to verify bot control and is not stored; this differs from separately connected marketplace mailings.

• Task and campaign type, conditions, destination, schedules, retention, budgets and history.
• Visits, control tokens, timers, CAPTCHA, Telegram API verification and completion status.
• Texts, links, formatting, images, screenshots, forwarded messages, comments, responses, appeals and moderation decisions.
• Marketing-offer topics, frequency, quiet hours, consent and preference history.

4. Financial data

• Ledger accounts, amounts, currencies, reserves, fees, quotes, rewards and transaction history.
• Stars payment and refund identifiers, amount and status received through Telegram.
• For deposits, including previous orders: internal order, provider transaction ID, amount, currency, payment method and status, technical events and data needed for reconciliation. PixorAds does not receive payer card or bank-account details.
• For payouts: phone, bank and recipient name; full details are encrypted and the ordinary interface displays a mask.

5. Audience profile and location

With separate optional consent, PixorAds processes country and city of residence, age band, languages, interests and preferred task categories. This information is used to match relevant tasks and produce aggregated campaign forecasts.

A supplied location is used during the request to identify the nearest supported city. Precise coordinates are not retained in the operational database, audit records or financial operations. PixorAds retains the confirmed country and city, verification time, expiry and a coarse accuracy band.

Advertisers do not receive an individual profile, precise location or the history of a particular performer. Reach is aggregated and rounded; small segments are hidden by a privacy threshold.

6. Publisher and marketplace data

For channels, groups, bots and Mini Apps, PixorAds processes public identifiers, links, categories, descriptions, prices, statistics, management permissions, verification, deal and placement history, and an optional TGStat link.

A connected bot token and publisher-supplied Telegram ID list are encrypted and used only for audience verification, test sends and agreed mailings. The publisher confirms authority over the bot and a lawful basis for supplying the list. Files are checked for format and size, and access to the source data is restricted.

7. Purposes and legal grounds

The legal basis depends on applicable law and the feature: entering into and performing the agreement, separate consent where required, legal duties or legally permitted protection of the parties' rights and security. National and regional requirements apply where processing falls within their material and territorial scope. If required data is withheld, the related feature may be unavailable. The audience questionnaire and marketing offers remain optional.

• Registration, authentication, contract performance and settings.
• Task assignment and verification, campaigns, mailings, placements, deals and ad delivery.
• Payment receipt and reconciliation, ledger records, refunds, conversion, rewards and payouts.
• Moderation, support, disputes, appeals and fraud prevention.
• Legal compliance and protection of PixorAds, users and third parties.
• De-identified and aggregated reliability and quality metrics.

8. Recipients

Necessary data may be handled by Telegram, payment providers, banks or payout partners, hosting, storage, CAPTCHA, analytics and infrastructure providers, and authorised support or moderation personnel. If an external ad network is enabled, only data required to request and verify an ad is shared under the displayed conditions.

Advertisers receive campaign status and aggregate metrics; publishers receive deal-performance data. Individual audience profiles are not disclosed, except evidence and rating information expressly used for an extended task. Authorities receive data only on a lawful basis.

9. Processing locations and international transfers

Infrastructure used by PixorAds and independent providers may be located in different countries. Storage and international transfer requirements are determined by applicable law, taking account of the user, processing activities and organisations involved. Telegram and other independent services describe their own terms and processing locations in their documents.

International transfers by PixorAds are subject to the legal grounds, assessments, notices, consents and safeguards required by applicable law. Using a provider abroad does not remove user rights or data protection duties. You may request information about a particular transfer and the applicable safeguards using the contacts in this policy.

10. Retention and deletion

• Account and settings: while the account or outstanding obligations exist.
• Financial, contract, payment and audit records: for mandatory accounting, disputes and limitation periods, normally at least five years unless law requires otherwise.
• Tasks, campaigns, evidence, support and appeals: through performance and up to three years after closure unless needed for an active dispute.
• Publisher tokens and recipient lists: while the platform is connected or placements remain open, then deleted or irreversibly de-identified unless required for law or a dispute.
• Audience profile: until consent is withdrawn or the profile is deleted; city verification: 90 days or the displayed period.
• Technical logs and risk signals: only as long as needed for security, repeat-abuse investigation and audit.

11. Security

Controls include access separation, administrator MFA, encryption of payout details, bot tokens and recipient lists, hashing of secrets and derived identifiers, short sessions, audit logs, backups, monitoring and transactional accounting.

No internet transmission can be guaranteed absolutely secure. PixorAds contains incidents, preserves investigation data, assesses impact and makes legally required notifications.

12. Automated decisions

Versioned rules may calculate a trust score, block a new assignment or route a payment, campaign, report or payout to human review. This does not automatically confiscate funds. Users receive an available reason and may request human review.

13. User rights

Send a request through @pixoradsinfo, @pixorads_support or info@pixora-ads.com with your Telegram ID, account ID or verified account email, the request and a reply method. To protect the account, PixorAds may verify ownership proportionately and request only necessary information. Records required by law, financial accounting, an open operation or defence of claims may remain after the working profile is deleted. Available rights, exceptions and response deadlines are determined by applicable law.

• Request processing information and a copy of relevant data to the extent provided by applicable law.
• Request correction, restriction or deletion, object to processing or request portability where the relevant right is provided by law.
• Withdraw audience-profile or marketing consent without invalidating prior lawful processing.
• Challenge processing or an automated decision before a competent authority or court.

14. Device storage

The Mini App uses protected session cookies and available Telegram Device/Secure Storage for authentication, theme and active-flow continuity. Mandatory storage is not used to sell data or for third-party behavioural tracking. Disabling it may prevent login or financial confirmation.

15. Updates and contact

The current policy is available at pixora-ads.com/legal/privacy. A material update receives a new version and is shown before affected processing continues. Privacy questions, consent withdrawal and data-subject requests are accepted through @pixoradsinfo, @pixorads_support or info@pixora-ads.com.

16. Web account and service email

Browser sign-in processes the email address, address verification, an Argon2id password hash, protected derivatives of one-time codes, login history, browser description and active sessions. Plaintext passwords are neither stored nor sent to the email provider.

For Telegram sign-in, the bot receives a one-time request that the user confirms in a private chat. The Telegram phone number is not requested. Sign-in methods are associated with a single PixorAds account.

Necessary cookies support sign-in, request protection and browser-bound confirmation. A session lasts up to 30 days and can be ended in the profile. Browser storage contains interface preferences, pending verification and a referral parameter. Email codes last 10 minutes and bot login requests last 5 minutes; scheduled cleanup removes expired records.

When Resend is connected, it receives the recipient address and requested service email content, including the one-time code, to deliver the email and process delivery status. Registration and recovery emails do not constitute consent to advertising mailings. Provider information: https://resend.com/legal/privacy-policy. Delivery may involve infrastructure outside the user’s country and is subject to applicable transfer requirements.