← Back to BandCheck

Privacy Policy

Last updated: May 2026

1. Data We Collect

When you use BandCheck, we collect:

Telegram identifiers: your Telegram user ID, username (if set), first name
Preferences: interface language (English, Russian, or Uzbek)
Essay content: the text of essays you submit, and the topic you choose
Evaluation results: band scores, criteria scores, and AI-generated feedback
Payment records: package purchased, amount, and Telegram payment ID (no card details)
Acquisition source: UTM-style deep-link parameter when you first start the bot (e.g. ?start=src_X), used for marketing attribution
Behavioural metadata: total checks, last activity timestamp, streak counters

2. How We Use It

To provide the Service: evaluate essays, save history, process payments, deliver feedback
To improve quality: aggregated, anonymised statistics on accuracy and user flow
To prevent abuse: rate limiting, fraud detection, support ticket triage
To process payments via Telegram Stars

We do not use your essays to train AI models. We do not sell your data to third parties.

3. Third Parties

AI provider. Essay text and topic are sent to an external AI provider for evaluation. The provider's data-use terms apply. We choose providers whose terms do not use API-submitted data for model training.
Telegram. The Service runs inside Telegram. Telegram processes your messages, payments (via Telegram Stars), and identity. Telegram's Privacy Policy applies.
Cloudflare. This landing page is served via Cloudflare Pages with privacy-friendly analytics (no individual tracking cookies by default).

4. Retention

Data is retained while you are an active user. Specifically:

Essays and feedback: retained indefinitely so you can access your history
Payment records: retained for bookkeeping per applicable laws (typically 5-7 years)
Inactive accounts: may be purged after extended inactivity (12+ months)

5. Your Rights

Delete your data anytime. Send /delete_my_data inside the bot. We will:

Permanently delete your profile, essays, and check history
Anonymise payment records (detached from your ID, retained only as financial totals)

You also have the right to:

Request a copy of your data (write via /support)
Correct any inaccuracies in your profile
Opt out of marketing messages (we send very few; broadcasts are rare)

EU users have additional rights under GDPR (right to portability, restriction, objection). Russian users have rights under FZ-152. Uzbek users have rights under Law №547. Submit requests via /support.

6. Security

Data is stored on a secured server with encrypted at-rest backups. We do not store passwords, card numbers, or other payment credentials — all payments are processed by Telegram. Access to user data is limited to the bot operator account.

7. Children

The Service is intended for users aged 16 and older. If we learn that we have collected data from a child under 16 without parental consent, we will delete that data. Parents/guardians should contact /support if they believe their child has provided us data.

8. International Transfers

Your data may be processed in countries other than your country of residence — for example, in the regions where our infrastructure and AI providers operate (typically the United States and the European Union). By using the Service, you consent to such transfers.

9. Changes

We may update this Policy from time to time. Material changes will be announced inside the bot and reflected in the "Last updated" date at the top.

10. Contact

Questions or requests? Send /support inside the bot.