Privacy Policy

The data controller is GYBE LABS LTD, registration number 16845366 , registered in England and Wales. Registered office: 71–75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ.

For privacy inquiries and exercising your rights, please write to support@tovgram.com.

• Public listings from open Telegram sources: text, images, price, city, category, link to source, and public information about the author.
• Listings submitted through the TovGram bot and the information required for their publication and management.
• Telegram data when logging in or interacting with the bot: Telegram ID, name, username, subscription settings, and bot connection status.
• Favorite listings, account settings, complaints, inquiries, and correspondence with support.
• Technical details: IP address in security logs, device and browser type, requested pages, request times, cookies, and localStorage data described below.
• For advertisers: legal name, country, contact details, materials, order confirmation, results of compliance checks, price, status, and payment ID. We do not receive full bank card data.

We receive data directly from you, from open Telegram groups and channels, from Telegram upon login, as well as from technical and payment providers. If you publish a contact in an open group, it may appear together with the listing on TovGram.

• Performance of the contract: account, login, subscriptions, posting and managing listings, advertising orders, and support.
• Legitimate interests: aggregation of public listings, search, security, abuse prevention, handling complaints, and improving TovGram. We consider the impact on user rights and provide ways to object and remove data.
• Legal obligation: taxes, accounting, sanctions and other mandatory checks, responses to competent authorities.
• Consent: when applicable law requires separate consent. It may be withdrawn for the future.

We use algorithms and AI tools to extract information from listings, assign categories and attributes, find duplicates and reused images, and identify possible violations. A typical listing may be automatically rejected, hidden, or marked for review. Paid advertising undergoes manual review.

Such processing is not used for decisions that have legal or similarly significant effects on a person. If automated moderation made a mistake, request a review by email — a human will verify the decision.

In the current configuration, TovGram uses:

• session — secure httpOnly login cookie, up to 14 days;
• telegram_login_nonces — secure login verification cookie, up to 10 minutes;
• tovgram_favorites in localStorage — list of selected ads until you delete them or clear browser data;
• tovgram_stats_visitor — random identifier up to one year for deduplication of public view counters and favorites without an account;
• Google Analytics cookies, including _ga and _ga_* , — to distinguish browsers and sessions; duration depends on Google Analytics settings and can reach up to two years.

Google Analytics 4, Umami Cloud, and Vercel Web Analytics are used for visit statistics and product events. They may receive the page path, referrer, time, technical details about the browser and device, approximate location, and a limited set of interface events. We do not transmit search query text, name, email, or Telegram ID in user events.

Umami and Vercel Web Analytics are declared by providers as cookieless tools; Google Analytics uses analytics cookies. Analytics is needed to understand the operation and improve TovGram, not for personalized advertising. You can restrict cookies and third-party scripts in your browser settings; this does not prevent viewing ads, but some login, favorites, or counters features may function differently.

Data may be processed in the scope necessary for the corresponding task by:

• Telegram — login, bot, original ads, links, and messages;
• payment providers — accepting advertising payments, fraud prevention, receipts, and invoices;
• Google, Umami, and Vercel — web analytics;
• cloud infrastructure providers, databases, search, and file storage;
• professional consultants and government authorities when required by law or to protect rights.

TovGram works with users and providers in different countries. Therefore, data may be processed outside the United Kingdom. When required by law, we use adequacy decisions, UK contractual guarantees, or other permitted grounds and assess the risks of transfer.

• Technical cookies are stored for the periods indicated above; server-side view tokens — up to 24 hours, and public favorites counter records — up to one year from last selection.
• Account and settings are stored while the account is active, then deleted or anonymized taking into account backups and mandatory requirements.
• Ads are stored while they are available or needed for service operation, complaint review, and fulfillment of deletion requests.
• Appeals and moderation materials are stored until the issue is resolved and thereafter as long as reasonably necessary to protect rights and prevent repeat violations.
• Advertising orders, confirmations, payment details, sanction checks, and accounting records are kept for at least six years.
• Analytics data is stored according to Google Analytics, Umami, and Vercel settings; retention periods and data access should be reviewed regularly and limited to the necessary minimum.

Longer retention is possible if required by law, dispute, investigation, or protection of lawful rights. When data is no longer needed, we delete or anonymize it.

Depending on applicable law, you may request access, a copy, correction, deletion, restriction of processing, and transfer of data, as well as object to processing based on legitimate interest or withdraw consent. We may ask to verify identity and have the right to retain information required by law.

Deleting an ad from TovGram does not delete the original message in Telegram. For that, you need to contact the author or administrator of the original platform.

First, write to us at support@tovgram.comso we can investigate. You also have the right to lodge a complaint with Information Commissioner’s Office (ICO) or another competent data protection authority, if it has jurisdiction.

We may update this policy when the service, providers, or law change. The new version takes effect from the date indicated at the top of the page. Related rules are available in Terms of Use and Advertising Placement Conditions.