Privacy Policy – TAILRD

Note: This English version is a faithful translation of our German privacy policy for your convenience. In case of doubt, the German text prevails.

1. Controller

TAILRD, Grenzstraße 18, 01640 Coswig, Germany · Email: support@tailrd.art

2. Purpose and scope

This policy explains processing of personal data in connection with our Telegram bot service. We process data solely to provide the service, communicate, bill, secure operations and comply with legal duties.

3. Categories of data

• Master data: name/Telegram username, contact details where provided
• Communication data: emails, Telegram IDs, message contents
• Payment data: payment status/transaction IDs (e.g., Telegram Stars); no full payment details stored by us
• Image data: uploaded photos (input), generated portraits (results)
• Usage/log data: timestamps, technical metadata, error logs

4. Legal bases

• Art. 6(1)(b) GDPR (contract/pre‑contract) – service provision
• Art. 6(1)(a) GDPR (consent) – image uploads, optional training usage
• Art. 6(1)(c) GDPR (legal obligation) – e.g., retention
• Art. 6(1)(f) GDPR (legitimate interests) – security, error analysis, abuse prevention

5. Recipients and third‑country transfers

We use providers for hosting, IT operations, support and payment handling. Transfers to third countries occur only under an adequacy decision or appropriate safeguards (Art. 46 GDPR, e.g., EU SCCs) plus additional risk assessment.

6. Storage periods / deletion

• Input and intermediates are usually deleted within 24 hours.
• Results (generated portraits) are available for download within the stated time window.
• Contract and billing records are retained up to 10 years under commercial/tax law.

7. Data subject rights

• Access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), portability (Art. 20)
• Objection to processing (Art. 21)
• Withdrawal of consent with effect for the future (Art. 7(3))

To exercise your rights, simply contact support@tailrd.art.

8. Bot flow, withdrawal, deletion windows

Where required, the bot collects consent (e.g., for processing uploaded images or optional training usage). The statutory right of withdrawal may lapse for digital content per Sec. 356(5) BGB once performance starts after the respective confirmations. Deletion time windows are shown transparently.

9. Security

We implement technical and organisational measures to protect data from loss, manipulation and unauthorised access – access controls, encryption, logging and periodic security reviews.

10. Minors

The service targets adults. Minors require consent of their guardians.

11. Changes to this policy

We update this policy when legal, technical or operational changes require it. The current version is always available on this page.

12. Supervisory authority

Data subjects may lodge a complaint with a supervisory authority, in particular in their habitual residence, place of work or place of the alleged infringement. For Saxony, Germany: The Saxon Data Protection Commissioner.

Contact

TAILRD · Grenzstraße 18 · 01640 Coswig · Germany · Email: support@tailrd.art