Privacy notice

Last updated: 13 October 2026

1. Who processes your data

The controller is TITIO s.r.o., registered office U první baterie 802/5, Střešovice, 162 00 Praha 6, Czech Republic, company number 28241266. Write to support@velocitybot.pro with anything about your data, including the requests described in section 7.

2. Two different sets of data

This notice is about your data as a customer of VelocityBot: what you gave us when you registered, and what the service records while you use it. For that data we are the controller.

Data about your own subscribers in Telegram is a different matter. There you are the controller and we only process it on your instructions, as your processor: we store it, deliver your content, and keep track of who has paid for access. What you collect from them and what you tell them about it is your decision and your duty.

3. What we process about you

  • Registration and billing details — name, email, phone, address, and for a company its name, company number and VAT number. The phone number is there so that we can reach you about the account by text message when email does not get through.
  • Payment records — the plan, the amount, the date, the payment reference from Telegram, and your Telegram user ID and name, which tie the payment to your order. You pay in Telegram Stars, so we never see a card or how you bought your Stars.
  • Account and technical records — your console username, when you signed in, and server logs including the IP address a request came from.
  • Where you came from — if you reached the site through an ad or a link with campaign tags, your order keeps the source, the campaign, the search term and the ad click identifier (Google’s gclid). They travel from the page address in the registration form; no cookie is set for them.
  • What you write to us — support email and its attachments.

4. Why, and on what legal basis

  • To provide the service and bill it — performance of the contract, Article 6(1)(b) GDPR. Without these data we cannot give you an account or take payment.
  • To meet legal duties — Article 6(1)(c). Accounting and tax records are the main one.
  • To keep the service secure — our legitimate interest, Article 6(1)(f): logs that let us find abuse, a broken deployment, or someone else's login attempts.
  • To see which pages of the public site help — your consent, Article 6(1)(a). It applies only if you allow Google Analytics in the bar at the bottom of the site, and you can withdraw it at any time under Cookie settings at the bottom of the page. Withdrawing does not affect the measurement made before.
  • To see which ads and links bring customers — our legitimate interest, Article 6(1)(f): we pay for advertising and need to know which of it works. These details stay with us; we do not send them to Google or anyone else.

We do not use your data to target advertising, we do not sell it, and no decision about you is made automatically.

5. Who else sees it

  • Microsoft — hosting (Azure, data centre in Poland), the database, and the mailbox we write to you from.
  • Microsoft (Azure AI Foundry) — the AI model that drafts text. It receives the prompt and the text you are working on. The deployment sits in Poland.
  • SMSAPI — the company that delivers our text messages. It receives your phone number and the text of the message, which is short and never contains your password.
  • Google — Google Analytics on the public site, and only if you allow it. It receives what your browser sends when it opens a page there: the page address, the page you came from, your device, browser and screen size, a rough location derived from your IP address, and a random identifier from its cookie. Google Analytics does not store IP addresses.
  • Telegram — what you publish, because publishing it is the point, and your payment for the plan, which goes through Telegram Stars. Telegram handles the payment under its own terms and privacy policy.

Apart from Telegram handling your payment, everyone above processes the data for us under a contract, not for their own purposes.

6. Sending data outside the EU

Hosting, the database and the mailbox stay inside the European Union. Requests to the AI model may be routed to a Microsoft data centre outside the EU; that transfer relies on processed within the EEA, no third-country transfer. If this matters to you, say so before you use the AI drafting — it is a feature you can leave alone.

Google Analytics measurements may be processed on Google's servers in the United States. That transfer relies on the EU–US Data Privacy Framework, under which Google LLC is certified, and on the standard contractual clauses in Google's data processing terms. Without your consent nothing goes there.

7. Your rights

You can ask us to:

  • tell you what we hold about you, and give you a copy;
  • correct anything that is wrong;
  • delete your data, once we no longer need it for the contract or for a legal duty;
  • restrict processing, or object to processing based on our legitimate interest;
  • hand your data over to another provider in a machine-readable form.

Write to support@velocitybot.pro. We answer within one month. If you think we handled it badly, you can complain to the Czech Data Protection Authority (Úřad pro ochranu osobních údajů, www.uoou.cz), or to the authority where you live.

8. How long we keep it

  • Account and registration data — 3 years after the last payment, so that we can document what was invoiced and to whom.
  • Invoices and accounting records — as long as tax and accounting law requires, which in the Czech Republic is up to ten years.
  • Server logs — weeks, not years.
  • Support email — while it is useful for the case, and then it goes.
  • Google Analytics — the cookie expires a year after your last visit; Google keeps the measurements for at most 14 months.

9. Cookies and what stays in your browser

The public site sets one cookie of its own, and only when you pick a language in the menu: it remembers that language for a year, so the next page opens in it. It also remembers in your browser whether you chose the light or the dark look, and how you answered the question about Google Analytics; neither leaves your device.

With your consent, the public site and the help pages use Google Analytics, which tells us how many people come, from where, and which pages they read. It stores the cookies _ga and _ga_… with a random identifier. Until you choose Allow in the bar at the bottom of the page, it is not even loaded: nothing is sent to Google and nothing is stored. Its advertising features are switched off, and the payment page is never measured. You can change your mind at any time under Cookie settings at the bottom of the page; choosing Decline also deletes the cookies Google Analytics stored before.

The console sets cookies only for what it needs to work: keeping you signed in, protecting forms against forgery, and remembering which figure and language you are working with. They are necessary for the console to work, so they need no consent. The console is never measured, and we use no advertising trackers anywhere.

10. Changes to this notice

If we change how we process data, we publish a new version here and, when the change matters to you, we say so by email.