Privacy Policy

1. Who we are

Telerify ("we", "us") operates the website telerify.com and the Telerify API. For any privacy-related request, contact us at contact@telerify.com.

2. Data we collect

Account data: When you sign in with Google OAuth, we receive your name, email address and profile picture. This is used solely to create and manage your Telerify account.

Payment data: Payments are processed by Stripe. We never see or store your card number. We store a Stripe session ID and the plan purchased.

Usage data: For each API lookup, we store the phone number queried, the lookup status (found / not found), the number of credits used, and latency — for your dashboard history. We do not permanently store the Telegram profile data returned by a lookup.

Technical data: Standard server logs (IP address, browser user-agent, timestamps) are kept for security and debugging purposes and are automatically purged after 30 days.

3. How we use your data

• Provide and maintain your account and API access
• Process payments and attribute credits
• Display your lookup history in the dashboard
• Prevent abuse and enforce rate limits
• Respond to support requests

We do not sell, rent or share your personal data with third parties for marketing purposes.

4. Legal basis (GDPR)

We process your data based on:

• Contract performance (Art. 6(1)(b) GDPR) — to provide the API service you purchased.
• Legitimate interest (Art. 6(1)(f) GDPR) — security, fraud prevention, and service improvement.
• Legal obligation (Art. 6(1)(c) GDPR) — tax and accounting requirements.

5. Data retention

Account data is kept as long as your account is active. Lookup metadata (phone number, status, latency) is retained for 12 months, then automatically deleted. Payment records are kept for 10 years as required by tax law.

6. Data sharing

We share data only with:

• Stripe — payment processing
• Google — OAuth authentication

No other third parties receive your data.

7. Your rights

Under the GDPR, you have the right to:

• Access your personal data
• Rectify inaccurate data
• Erase your data ("right to be forgotten")
• Restrict processing
• Data portability
• Object to processing based on legitimate interest

To exercise any of these rights, email contact@telerify.com. We will respond within 30 days.

8. Opt-out for looked-up persons

If your phone number has been looked up through our API and you wish to opt out of future lookups, email contact@telerify.com with your phone number. We will add it to our blocklist within 48 hours.

9. Security

All connections use TLS 1.3 encryption. API keys are hashed at rest. Database access is restricted to the application server. We conduct regular security reviews.

10. Cookies

We use a single session cookie (authjs.session-token) required for authentication. We do not use tracking cookies, analytics cookies, or third-party advertising cookies.

11. Changes

We may update this policy from time to time. Changes will be posted on this page with an updated date. Continued use of the service after changes constitutes acceptance.

12. Contact

For any questions about this privacy policy, contact us at contact@telerify.com.