Privacy Policy

Welcome to FlashCom's Privacy Policy. This document explains how we collect, use, disclose, and safeguard your information when you use our services, including our website, APIs, Telegram bots, and related services.

FlashCom provides digital tools, bots, APIs, and automation resources primarily focused on Telegram services. We are committed to protecting your privacy and ensuring transparency about our data practices.

FlashCom operates several specialized platforms, each with its own privacy policies that supplement this main policy:

When using any FlashCom child platform, you are subject to both this Privacy Policy and the specific privacy policy of that platform. In case of conflict, the specific policy of the child platform will prevail for matters related to that platform.

As the parent company, FlashCom collects certain core information across all our services and child platforms (such as BotBroad, GetMart, TeleFlash, FlashCom Apis etc...). Each platform may also collect additional data as described in their respective policies, but all data is ultimately processed under FlashCom.

General Personal Information

• Telegram ID, Username, First & Last Name – collected when you log in or interact with our services via Telegram to verify and manage accounts
• Email Address – used for account verification, recovery, and communication where applicable
• IP Address – logged for fraud prevention, security monitoring, and service optimization
• Bot Tokens – only if provided by you for integration; always stored securely and encrypted

General Usage Information

• Service Usage Data – logs, actions, API requests, and activities for monitoring, debugging, and improvements
• Device & Browser Information – collected through cookies or similar technologies to enhance user experience
• Interaction Data – details on how you interact with our platforms, bots, or features

We use the information we collect for various purposes, including:

When you log in to FlashCom services using your Telegram account, we receive the following information from Telegram:

• Your Telegram ID (a unique numerical identifier)
• Your first and last name as shown on your Telegram profile
• Your Telegram username (if you have one set)
• Your profile photo (if available)
• Authorization hash and authentication date

This information is validated with Telegram's official API and is used solely for secure authentication and account management. We do not request or have access to your private Telegram messages or contacts.

For certain services, we require a valid email address for account verification and communication purposes:

• We send one-time verification codes to your email for security purposes
• These codes expire within a short timeframe (typically 10-15 minutes) and cannot be reused
• Emails are sent via our email service provider, but we do not access or log the content of these emails
• Your verified email is stored securely and never shared publicly without your consent

You may request deletion or update of your email address at any time by contacting our support team.

Our websites and services may use cookies, local storage, and similar technologies to enhance your experience:

• Authentication Cookies – to keep you logged in during your session
• Preference Cookies – to remember your settings and preferences
• Analytics Cookies – to understand how our services are used and improve them
• Security Cookies – to protect against cross-site request forgery and other attacks

You can control cookies through your browser settings. However, disabling cookies may affect the functionality of our services.

We do not sell, rent, or trade your personal information with third parties for marketing purposes. However, we may share or allow access to your information in the following circumstances:

Service Providers & Integrations

We may share information with trusted third-party service providers and integration partners who assist us in operating our services or delivering features, such as:

• Hosting providers who store and process our data
• Email or messaging service providers for communication
• Payment processors and verification services
• Analytics services to understand usage patterns

In some cases, these third parties may automatically receive or access certain information (for example, through secure APIs or logs) without separate notice each time. All such parties are required to use your information only for the purpose of providing their services to us and must protect it in accordance with applicable data protection laws.

Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities.

Business Transfers

In the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction.

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy:

• Account Information – retained while your account is active. If FlashCom terminates or deletes your account, certain information may still be retained for a reasonable period for legal, regulatory, or administrative purposes before being deleted or anonymized.
• Usage Data – typically retained for up to 12 months for analytics and service improvement
• Communication Records – retained as needed to provide support and resolve disputes

We may delete your data at any time for operational, regulatory, or storage management reasons. In the event of system failures, we may need to restore data from backups or require users to recreate accounts if data cannot be recovered.

We implement appropriate technical and organizational measures to protect your personal information:

• Encryption of sensitive data in transit and at rest
• Secure hashing of passwords
• Regular security assessments and vulnerability testing
• Restricted access to personal information on a need-to-know basis
• Secure development practices and code reviews

Some child platforms may not provide a direct option to delete your account. If you wish to request account deletion in such cases, please contact our support team via Telegram Support.

Depending on your location, you may have certain rights regarding your personal information:

To exercise any of these rights, please contact us using the information provided in the "Contact Information" section. We will respond to your request within a reasonable timeframe.

Our services are not directed to individuals under the age of 13 (or under 16 in the European Union). We do not knowingly collect personal information from children.

If we become aware that we have collected personal information from a child without verification of parental consent, we will take steps to remove that information from our servers.

Our services may contain links to or integrate with third-party websites, services, or applications. This Privacy Policy applies only to FlashCom services.

We are not responsible for the privacy practices of third-party services. We encourage you to review the privacy policies of any third-party services you use.

Your information may be transferred to and processed in countries other than your own. These countries may have data protection laws that are different from the laws of your country.

We take appropriate safeguards to ensure that your personal information remains protected in accordance with this Privacy Policy when transferred internationally.

In the event that we become aware of a data breach that may compromise your personal information, we will make reasonable efforts to:

• Notify affected users directly (if contact information is available)
• Publish notices on our official channels (e.g., website or Telegram) if direct notification is not possible
• Provide information about the nature of the breach
• Offer guidance on protective measures you can take
• Take immediate steps to contain and address the breach

While we implement measures to detect and prevent unauthorized access, no system can guarantee it will identify every possible breach. Notifications will be provided only if we become aware of an incident affecting your data.

We comply with applicable data protection laws, including:

General Data Protection Regulation (GDPR)

If you are located in the European Economic Area (EEA), you have certain rights under the GDPR, including the right to access, rectify, erase, and restrict processing of your personal data.

California Consumer Privacy Act (CCPA)

If you are a California resident, you have certain rights under the CCPA, including the right to know what personal information is collected and how it's used, and the right to opt-out of the sale of personal information (we do not sell personal information).

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by:

• Posting the updated policy on our website with a new "Last updated" date
• Sending a notification to registered users when appropriate
• Updating the policy in our applications

Your continued use of our services after any changes to this Privacy Policy constitutes acceptance of those changes.