Legal
Privacy Policy
This policy explains what personal data ACE360 collects, why we collect it, how long we keep it and the choices you and your leads have.
Last updated: 16 September 2026
1.Who this policy covers
It covers two groups: partners who hold an ACE360 account, and the leads a partner captures through their own Telegram bot, spin wheel, quiz, scratch card or tracking links.
For partner account data, ACE360 is the data controller. For lead data inside a partner workspace, the partner is the controller and ACE360 acts as their processor.
2.Data we collect from partners
When you request access and use the platform, we collect:
- Identity and contact details: name, email address, Telegram handle, company or brand name.
- Application details: audience size, partner type and any notes you provide.
- Workspace configuration: brand colours, referral links, public slugs, campaign settings and automation messages.
- Encrypted credentials: your Telegram bot token is encrypted before storage and is never displayed in full again.
- Usage and billing records: sign-in events, feature usage counters, plan tier and subscription status.
3.Data captured about leads
When someone interacts with a partner's bot or public campaign page, we may record their name or display name, Telegram user ID and handle, email address if they provide one, the source channel, funnel status, deposit status markers and any notes the partner adds.
Only the partner who owns that workspace can see those records. Isolation is enforced at the database level, so no partner can read, edit or export another partner's leads.
4.Why we process this data
We process personal data to:
- Operate the platform: authentication, lead capture, CRM, automations and analytics.
- Provide requested features such as AI content generation, engagement campaigns and tracking links.
- Handle billing, plan limits and account administration.
- Keep the service secure, detect abuse and meet legal obligations.
5.Legal basis
Where the GDPR or a similar law applies, we rely on contract performance (providing the service you signed up for), legitimate interests (security, service improvement, fraud prevention), consent where required (for example marketing communications), and legal obligation where applicable.
Partners must have their own lawful basis for contacting the leads they capture, including any consent their local rules require.
6.Service providers
We share data only with the providers needed to run ACE360: cloud hosting and database infrastructure, authentication, AI generation for the content you request, email delivery for account notifications, payment processing for subscriptions, and Telegram for messages your bot sends and receives.
We do not sell personal data and we do not share lead data between partners.
7.International transfers
Our infrastructure providers may process data outside your country. Where required, transfers rely on appropriate safeguards such as standard contractual clauses.
8.Retention
Partner account data is kept while the account is active and for a limited period afterwards to meet legal, tax and dispute-resolution needs. Lead data is kept until the partner deletes it or closes their workspace. Demo data can be removed at any time from the workspace with one action.
9.Security
We use encrypted transport, encrypted storage of sensitive credentials, row-level access control per partner, scoped service credentials and audit-friendly server-side processing. No system is perfectly secure, so please use a strong, unique password and keep your bot token private.
10.Your rights
Depending on your jurisdiction you may request access, correction, deletion, restriction, portability or objection regarding your personal data, and you can withdraw consent where processing relies on it.
Leads should contact the partner who captured their details first, since that partner controls those records. We will assist partners in fulfilling such requests.
11.Cookies and local storage
We use strictly necessary cookies and browser storage to keep you signed in and to remember workspace preferences. We do not run third-party advertising trackers on the platform.
12.Changes and contact
We will post updates to this policy on this page and notify account holders of material changes. For privacy questions or data requests, contact the ACE360 partnerships team using the details in your workspace.