rivacy Policy for RefatBd Telegram Notification Service

Last Updated: October 28, 2025

RefatBd (“we,” “us,” or “our”) operates the Telegram Notification Service accessible via https://tgapi.refat.ovh/api.php (the “Service”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service, typically through companion software like the “RefatBd notifications with Telegram for Woocommerce” WordPress plugin (the “Plugin”). Please read this policy carefully.

1. Information We Collect

To provide the Service, we collect or receive the following types of information:

  • Connection Information: When you connect your website via the Plugin, we receive your website’s domain, an auto-generated unique secret key, and issue you an API Key.

  • Notification Data: When the Plugin triggers a notification, we receive the final, formatted message content (which may contain details like order information, product names, customer names, emails, phone numbers, depending on your Plugin template configuration) and the target Telegram Chat ID(s). Your API Key is also sent for authentication.

  • Command Data: When you initiate a command (e.g., /sales) from Telegram to the bot associated with the Service, we receive the command, its arguments, and your Telegram Chat ID. We transmit this, along with your API Key, to your website’s designated endpoint. We then receive the response from your website to relay back to you in Telegram.

  • Status Check Data: Periodically, or when manually triggered, the Plugin sends your domain, secret key, and API key to verify connection status and retrieve bot information.

  • Usage Data: We track message volume associated with your API Key to monitor service usage and enforce limits for different tiers.

2. How We Use Your Information

We use the collected information solely for the purpose of operating and improving the Service:

  • To authenticate requests from your website using the API Key and site secret.

  • To securely relay notification messages from your website to the specified Telegram Chat ID(s) via our managed bot.

  • To relay commands initiated in Telegram to your website and return the responses.

  • To verify your website’s connection status and provide bot information.

  • To monitor message usage and enforce service limits.

  • To troubleshoot issues and maintain the integrity of the Service.

We do not use the content of your notification messages or command responses for any other purpose, such as marketing or analysis, beyond what is necessary to deliver the message or command result.

3. Data Security

We implement appropriate technical and organizational measures to protect the information transmitted through our Service against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. Communication between your website and our API endpoint uses HTTPS. However, no method of transmission over the Internet or electronic storage is 100% secure.

4. Data Sharing and Disclosure

We do not sell, trade, or rent your information to third parties. We may disclose information:

  • To Telegram: Message content and recipient Chat IDs are necessarily shared with the Telegram platform for message delivery. Your use of Telegram is subject to Telegram’s own Privacy Policy.

  • As Required by Law: If required by law, subpoena, or other legal process.

  • To Protect Rights: To protect our rights, property, or safety, or that of our users or others.

5. Data Retention

We retain connection information (domain, API key status) as long as your site is connected. Message content is processed for immediate delivery and is generally not stored long-term on our primary systems, although temporary logs containing metadata (like timestamps, Chat IDs, success/failure status, message size) may be kept for troubleshooting and usage monitoring purposes for a limited period. Command data is processed transiently for relaying. Usage statistics (message counts) are retained according to your service tier and our operational needs.

6. Your Choices

You can disconnect your website from the Service at any time by removing the API Key within the Plugin settings or deactivating the Plugin.

7. Third-Party Links

The Service facilitates communication with Telegram, a third-party platform. We are not responsible for the privacy practices of Telegram. Please review Telegram’s Privacy Policy.

8. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes. Your continued use of the Service after such changes constitutes your acceptance of the new policy.

9. Contact Us

If you have any questions about this Privacy Policy, please contact us at [email protected].