Last updated: February 2026
Paprika ("we", "us", "our") operates the paprika.bot website and the Paprika Telegram bot. This policy explains what data we collect, why we collect it, how it is stored, and your rights.
When you use Paprika via Telegram, we receive your Telegram user ID, display name, username, and channel IDs (for creators). We do not access private Telegram conversations beyond interactions with the Paprika bot. We do not collect email addresses, phone numbers, or passwords.
Creators may provide channel metadata (title, description, pricing), payment instructions, and Stripe account identifiers (if using gateway mode).
For fans, we store proof submissions as Telegram file references and access grant records. Paprika does not download, copy, or host proof images. They remain on Telegram's servers.
When using Stripe gateway mode, Paprika may store: Stripe customer ID, Stripe subscription ID, plan tier, payment status, and timestamps. Paprika does not store full credit card numbers, CVV codes, or bank account details. Stripe handles all payment data under its own Privacy Policy.
We may log IP addresses, API requests, webhook events, and error logs for operational and security purposes.
We use your data solely to operate the service: authenticating users, managing channel access, processing webhook events, enforcing membership expiration, and preventing fraud.
We do not sell, rent, or share your personal data with third parties for marketing purposes.
If you are in the European Union, our processing is based on: contract performance (providing the service), legitimate interest (security and abuse prevention), and legal obligations (billing compliance).
Paprika relies on the following third-party services:
We may share data with these services as required for the operation of Paprika. We may also share data with legal authorities if required by law. We do not sell data to advertisers.
We retain your data for as long as your account is active and as required for billing records and legal obligations. If you stop using Paprika, your data may be retained for up to 12 months before deletion. Creators can request immediate deletion by contacting us.
Paprika uses encrypted HTTPS connections, secure cloud infrastructure, role-based service isolation, token-based authentication, and access control via Telegram identity.
No system can guarantee absolute security. We take reasonable measures to protect your data but cannot warrant that unauthorized access will never occur.
Paprika may process data on cloud infrastructure located outside your country. By using Paprika, you consent to such transfers.
Depending on your jurisdiction, you may have the right to access, correct, or delete your personal data. You may also withdraw consent where applicable.
To exercise these rights, contact us through the Paprika Telegram bot or at the email below.
Paprika is not intended for users under 18. We do not knowingly collect data from minors.
We may update this Privacy Policy at any time. Continued use of the service after changes constitutes acceptance of the updated policy.
For privacy-related questions, reach out via the Paprika Telegram bot or email us at chily@paprika.bot.