Last updated: 10 March 2026
1. Data Controller
XPROFIT OU
Registry code: 16527023
Address: Tallinn, Estonia
Email: info@xprofitx.com
2. What Data We Collect
| Data | Source | Purpose |
|---|---|---|
| Telegram user ID | Telegram API (automatic) | Account identification, session management |
| First name, last name | Telegram profile | Personalization, case records |
| Username | Telegram profile | Contact identification |
| Language preference | User selection in bot | Service localization |
| Country/city | User input (legal consultations) | Jurisdiction determination |
| Chat messages (text) | User input | Providing consultation service |
| Voice messages | User input | Speech-to-text conversion |
| Consultation history | Generated during service | Service continuity, case management |
| Legal case data | Generated during service | Case tracking, service improvement |
| Payment data | Stripe | Transaction processing |
3. Legal Basis for Processing (GDPR Article 6)
- Contract performance (Art. 6(1)(b)): Processing necessary to provide the consultation service you requested — includes Telegram ID, messages, session data, case records.
- Consent (Art. 6(1)(a)): Country/city (provided voluntarily for legal consultations), voice messages.
- Legitimate interest (Art. 6(1)(f)): Service improvement, security monitoring, fraud prevention.
4. How We Use Your Data
- To provide the AI consultation service (IT and legal information)
- To maintain consultation session continuity
- To create and manage legal case records
- To process payments for paid services
- To send service-related notifications
- To improve the quality of the Service
- To comply with legal obligations
5. Third-Party Data Processors
| Processor | Purpose | Location |
|---|---|---|
| Telegram | Bot platform, message delivery | UAE/UK |
| OpenAI | Text-to-speech voice generation | USA |
| Stripe | Payment processing | USA/EU |
| Anthropic | AI consultation responses | USA |
| Moonshot AI | AI consultation responses | China |
| OVH | Server hosting | EU (France) |
For international data transfers outside the EU/EEA, we rely on Standard Contractual Clauses (SCCs) or adequacy decisions as appropriate under GDPR Chapter V.
6. Data Retention
- Active consultation data: Retained for the duration of the consultation session.
- Legal case records: Retained for 3 years after case closure, or longer if required by law.
- Chat history: Retained for 1 year after the last interaction.
- Account data (Telegram ID, preferences): Retained until account deletion request.
- Payment records: Retained for 7 years as required by Estonian Accounting Act.
- Voice messages: Processed in real-time and deleted within 1 hour. Not stored permanently.
7. Your Rights (GDPR Articles 15-22)
You have the right to:
- Access your personal data (Art. 15)
- Rectify inaccurate data (Art. 16)
- Erase your data ("right to be forgotten") (Art. 17)
- Restrict processing (Art. 18)
- Data portability — receive your data in a structured format (Art. 20)
- Object to processing based on legitimate interest (Art. 21)
- Withdraw consent at any time (Art. 7(3))
To exercise your rights, contact us at: info@xprofitx.com
We will respond within 30 days.
8. Data Security
We implement appropriate technical and organizational measures to protect your data, including:
- Encrypted data transmission (TLS/SSL)
- Access controls and authentication
- Regular security updates
- Data minimization
9. Children
The Service is not intended for persons under 16 years of age. We do not knowingly collect data from children under 16.
10. Supervisory Authority
If you believe your data protection rights have been violated, you have the right to lodge a complaint with:
Andmekaitse Inspektsioon (Estonian Data Protection Inspectorate)
Website: aki.ee
Email: info@aki.ee
Address: Tatari 39, 10134 Tallinn, Estonia
11. Changes to This Policy
We may update this Privacy Policy. Changes take effect upon publication. We will notify active users of significant changes via the bot.
12. Contact
Email: info@xprofitx.com
Company: XPROFIT OU, Tallinn, Estonia (reg. 16527023)