This policy explains what personal data Xvidfa.st collects when you use the site, the API and the Telegram features, why we collect it and what you can do about it.
1. Who is responsible
Xvidfa.st is run by its operator, who decides how your data is used. You can reach the operator at our contact page.
2. What we collect
- Account data: username, e-mail address, an optional full name and a hashed password. We never store your password itself.
- Plan, points and payment records: which plan you have, your points balance and history, and for each payment its amount, currency, status and the provider's reference. We do not receive or store card data.
- Usage data: counts of API requests, exports and Telegram messages, which we need to apply your plan's limits.
- Telegram data: the token of each bot you add (stored encrypted), the channels you connect, and the Telegram IDs and usernames of people who start your bot.
- Scraping requests: the pages you ask us to scrape and what came of the request.
- Messages you send us: what you write in the contact form, with the name and e-mail address you give.
- Technical data: your IP address and browser details, used to keep the Service secure, to apply rate limits and to investigate abuse.
3. Why we use it
- To run the Service: sign you in, apply your plan, take and record payments, send your Telegram messages.
- To keep it safe: limit abuse, fraud and unauthorised access.
- To talk to you: answer messages and send account and payment notices.
- To meet legal duties, such as accounting rules and lawful requests from authorities.
4. Who we share it with
We share data only where it is needed to run the Service:
- payment providers, which process your crypto payments under their own terms;
- Telegram, when we send messages through your bot;
- our hosting and e-mail providers;
- authorities, when the law requires it.
We do not sell personal data.
5. How long we keep it
- Account data: for as long as your account exists, and for a short time afterwards for security and to answer questions.
- Payment and points records: for as long as accounting and tax rules require.
- Server and security logs: for a limited period, then they are deleted or anonymised.
- Contact messages: for as long as needed to deal with your request.
6. Cookies and browser storage
The Service keeps a small amount of data in your browser. The Cookie Policy lists what it is and why it is needed.
7. Your choices and rights
Depending on where you live, you may have the right to see the data we hold about you, to correct it, to have it deleted, to restrict or object to its use, and to receive a copy. To use these rights, write to our contact page. You may also complain to your local data protection authority.
8. Security
Passwords are hashed, secrets such as bot tokens are encrypted, and access to the systems is restricted. No system is perfectly secure, so please use a strong password that you use nowhere else.
9. Children
The Service is not meant for anyone under 18, and we do not knowingly collect data from children.
10. International transfers
Our providers may process data in other countries. Where the law requires it, we use safeguards for such transfers.
11. Changes
We may update this policy. If you keep using the Service after a change, you accept the new version.
12. Contact
Questions about privacy: our contact page.