1. Information We Collect
We collect information you provide directly when using Fanscriptor:
- Account information: Name, email address, and password when you register.
- Telegram information: Telegram user ID, phone number, and first name when you link your Telegram account.
- Payment information: Payment details are processed securely by Stripe. We do not store credit card numbers or bank account details on our servers.
- Usage data: Pages visited, features used, device type, browser, and IP address.
2. How We Use Your Information
We use your information to:
- Provide, maintain, and improve our services
- Process payments and manage subscriptions
- Automatically add and remove subscribers from Telegram channels
- Send transactional emails (payment confirmations, subscription reminders)
- Comply with legal obligations
We never sell your personal data to third parties.
3. Payment Processing
All payments are processed securely by Stripe. When you make a payment, your financial information is sent directly to Stripe's servers. Fanscriptor does not have access to your full credit card number. Stripe's privacy policy governs the handling of your payment data.
4. Telegram Integration
Fanscriptor uses Telegram's MTProto protocol to manage channel memberships. Your Telegram session data is:
- Encrypted with AES-256 before being stored in our database
- Used only for adding/removing subscribers from channels you manage
- Never shared with third parties
- Stored in ephemeral temporary files during operations, deleted immediately after use
5. Cookies and Tracking
We use:
- Essential cookies: For authentication (JWT tokens stored as httpOnly, secure cookies)
- Session storage: For conversation tracking (X-Conversation-ID)
- Analytics pixels: Meta, TikTok, and X pixels for measuring marketing effectiveness (configurable)
6. Data Retention
We retain your data for as long as your account is active. You may request deletion of your account and all associated data at any time by contacting privacy@fanscriptor.com.
7. Data Security
We implement industry-standard security measures including:
- Encrypted data at rest (AES-256 for Telegram sessions)
- HTTPS for all communications
- Rate limiting on authentication endpoints
- Input sanitization to prevent XSS attacks
- Helmet security headers
8. Contact
For privacy-related inquiries, contact us at privacy@fanscriptor.com.