Privacy Policy
This policy explains how we handle your personal data when you use the paid passport-appointment
notification tool (the “Service”) provided through the Telegram bot
@cherga_hunter_bot.
1. Data controller
PREMIUM SOFT VENTURES (registered sole-trader business; owner: Serhii Polishchuk), registered address 13 Ard na Greine, New Ross, Wexford, Y34 NH67, Ireland. Contact for privacy requests: support@premium-soft.ie.
2. What data we collect
- Telegram identifiers provided by Telegram when you use the bot: your Telegram user/chat ID, username (@handle) and first name.
- Service data: the cities you select, your session start/expiry dates, the alerts we send you, your responses in the bot (e.g. “I booked”), how many times you have started the Service, and any feedback you give. For the free demo we also record whether and when you used it (it is limited to one per user), the city assigned to it and how many demo alerts were sent, whether the single post-demo reminder has been sent to you, and whether you asked not to be reminded.
- Payment data: for each paid order we record the chosen cities, the amount, a payment reference code (
CH-…) and the order status. What follows depends on how you pay. For a bank transfer (Monobank, Revolut, BLIK) we additionally store the payment screenshot you send us to verify it. For a card payment the transaction takes place on a Stripe page, no screenshot is needed, and we store only what Stripe reports back to us about the transaction: its identifier, the amount, the currency, the status, and the email address if you provide one on the payment page — we need this to reconcile the payment and in case it is disputed. In neither case do we collect or store your card numbers or bank credentials: you enter those solely on Stripe's side or your bank's. - Usage & attribution: aggregated, non-advertising analytics about how the Service is used — the steps you take in the bot (e.g. started, accepted the rules, selected cities, paid), timestamps, and a source tag identifying which link/channel you arrived from (e.g.
channel, or a campaign tag from an advertisement). We use this only to understand and improve the Service; we do not sell it or use it for third-party advertising. - Website analytics (cherga.app): page views and referrer, collected by Umami, which we host ourselves on our own server. Umami sets no cookies and does not track you across sites — which is why the site shows no cookie banner: there is nothing non-essential to consent to.
- Error diagnostics: when something goes wrong, a technical error report may be sent to Sentry (Functional Software, Inc.), which we use to find and fix faults. Such a report can include the identifier of the affected order or Telegram chat, because a fault has to be traceable to be fixed. It never includes payment credentials or the content of your messages.
3. Why we use it and our lawful basis (GDPR Art. 6)
| Purpose | Lawful basis |
|---|---|
| Provide the paid service you asked for (send alerts, manage your session) | Contract — Art. 6(1)(b) |
| Process and verify your payment | Contract — Art. 6(1)(b) |
| Prevent abuse and keep the Service running for everyone | Legitimate interests — Art. 6(1)(f) |
| Send you one reminder message about the Service after your free demo — never a sequence, and you can decline it in the bot at any time | Legitimate interests — Art. 6(1)(f) |
4. Who we share it with
- Telegram (Telegram FZ-LLC) — the messaging platform that delivers the bot; your use of Telegram is also governed by Telegram's own privacy policy.
- Stripe (Stripe Payments Europe, Ltd., Dublin, Ireland) — our card payment processor. You enter your card details on Stripe's side and they never reach us; Stripe processes them as an independent controller under its own privacy policy.
- Bank transfer providers — a transfer is handled by Monobank, Revolut or, for BLIK, the relevant bank, under their own terms; we see only what we need to confirm your payment.
- Sentry (Functional Software, Inc.) — receives technical error reports, which may contain an order or chat identifier. Used to find and fix faults.
- Umami — website analytics, which we host ourselves on our own server. Receives page views and referrer, without cookies.
That is the complete list. We do not share your data with the passport service ДП «Документ», any government body, advertisers, or data brokers. We do not sell your data, and we do not use it for automated decision-making or profiling.
5. International transfers
Telegram operates globally, so your Telegram interaction data may be processed outside the European Economic Area under the safeguards Telegram applies.
Stripe processes payments through its Irish entity (Stripe Payments Europe, Ltd.), but may transfer data to other Stripe group companies outside the EEA under Standard Contractual Clauses (SCCs) approved by the European Commission.
Sentry is a US company, but error reports are processed on EU infrastructure
(ingest.de.sentry.io) under its Data Processing Addendum and the same Standard
Contractual Clauses. Umami runs on our own server in Germany, so that data does
not leave the EU at all.
6. How long we keep it
| Data | Kept for |
|---|---|
| Your account and session data in the bot | while you use the Service, and up to 12 months after your last session, so a returning user is recognised and the one-per-person demo cannot be reused |
| Payment records (order, amount, transaction reference) | 7 years, as Irish accounting and tax law requires |
| Payment screenshots for bank transfers | deleted once the payment is confirmed and the dispute window has passed — at most 90 days |
| Error reports in Sentry | 90 days, then deleted automatically |
| Website analytics (Umami) | aggregated statistics, not linked to you |
| Slot-availability statistics (city, time) | indefinitely — these describe the passport service, not you, and contain no link to any person |
We delete your data on request wherever we have no legal obligation to keep it. Where an obligation applies — payment records — we restrict the data instead of deleting it, and delete it when the period ends.
7. Your rights
Under the GDPR you have the right to access, rectification,
erasure, restriction, objection, and
data portability, and to lodge a complaint with the Irish Data Protection
Commission (dataprotection.ie). To exercise any right, message the bot or
email support@premium-soft.ie. We reply within
30 days, free of charge. Deleting your data is a single request — you do not
have to give a reason, and refusing to give one cannot be held against you.
The right to object deserves a specific note, because two things here run on legitimate interests rather than on your consent: the single post-demo reminder, and error diagnostics. You can decline the reminder inside the bot with one tap, at any time, without losing the Service.
8. Security & children
We collect the minimum the Service needs. The database is held on a single operator-controlled machine, is not exposed to the internet, and is backed up in encrypted form; access is limited to the operator. Payment credentials never reach us at all (see §4).
The Service is not directed at children under 16 and we do not knowingly collect their data.
8a. What we deliberately do not do
Stated plainly, because in this field people are right to ask:
- We never ask for, receive or store passport data or any personal documents.
- We never log in anywhere on your behalf and never make a booking for you.
- We do not sell, rent or share your data with data brokers or advertisers.
- We do not profile you or make automated decisions with legal effects about you.
- We are not affiliated with ДП «Документ» and do not act on its behalf.
9. Changes & contact
We may update this policy; the version/date above will change and material changes are notified via the bot. Contact: support@premium-soft.ie.
Change history
| Version | Date | What changed |
|---|---|---|
| 1.6 | 7 September 2026 | Named Sentry and Umami as processors; retention given as concrete periods instead of "a short buffer"; added §8a and the note on the right to object |
| 1.5 | 27 August 2026 | Added card payments via Stripe |
| 1.4 | 23 August 2026 | The demo replaced the free trial |