Privacy Policy Effective date: 2026-08-04 This policy explains how WheelSwap handles data for the website, Telegram bots, payments, and AI generation. Data we process We process Telegram ID, Telegram username, selected language, generation balance, uploaded car and wheel images, generated results, payment records, saved-card token records when enabled, and technical logs needed to operate the service. Images Uploaded images are used to create the requested AI preview. Temporary job images can be deleted after delivery. Recent completed results may be kept in the account history so the customer can view and download the latest previews. Payments Payments are processed by external payment providers. Card data is entered on the payment provider side. When a customer chooses to save a card, WheelSwap stores only the payment token and masked card details returned by the payment processor so the customer can manually buy more generation packs later. Cookies and Telegram login The website uses a session cookie after Telegram login. Telegram login data is validated before an account session is created. Sharing We share data only with providers required to operate the service: Telegram, payment processors, hosting infrastructure, and the AI image provider. Admin notifications may include the original images and generated result for quality control and support. Retention Operational records are stored in SQLite until removed by backup/restore or manual maintenance. Temporary generation files may be cleaned automatically. Payment and saved-card records may be retained for accounting, dispute, fraud-prevention, and security purposes. Security We do not store full card numbers or CVV. Secrets and provider keys must be kept in server environment variables and must not be exposed in public files or client-side JavaScript. User requests To request access, correction, deletion, or support, contact us with your Telegram ID. Contact Contact support through Telegram BOT.
Legal
Privacy Policy
What data we process and why.