This policy explains what FanDesk (operated by LyboTechGroup, Australia)
collects, why, and your choices. We aim to comply with the Australian Privacy Act 1988 and the Australian Privacy Principles.
1. What we collect
Telegram account basics: your numeric Telegram ID, first name, and username (if set) — provided by Telegram when you open the bot or Mini App. We never see your phone number or contacts.
Content you create: questions, answers, shoutout text, product listings and delivery content, profile links, reactions.
Payment records: the amount of Stars, what was purchased, and Telegram's payment charge ID. Payments are processed entirely by Telegram — we never receive or store card numbers or banking details.
2. Anonymous questions — our anonymity commitment
Questions are anonymous to the creator: creators never see who asked. The platform stores the link between a question and the asking account solely so we can enforce blocking, rate limits, moderation, and legal obligations.
We never reveal, sell, or share the identity of an anonymous asker — not to creators, not to advertisers, not to any third party.
We do not offer, and will not offer, any paid "reveal" or "hint" feature that deanonymises senders.
We do not share anonymous question content linked to identities with anyone. Any analysis we do is on aggregated, de-identified data only.
The sole exception is a valid legal requirement (such as a court order), or where disclosure is necessary to prevent serious and imminent harm.
3. How we use information
To operate the Service: deliver questions, publish answered Q&As to connected channels, run leaderboards, process purchases, deliver products.
To keep the Service safe: moderation, spam and abuse prevention, enforcing blocks.
To improve the Service: aggregate, de-identified usage analysis.
We do not sell your personal information, and we do not use your content for advertising.
4. Where data lives and who sees it
Data is stored on infrastructure provided by our hosting provider (currently Railway), which may be located outside Australia (including the United States). By using the Service you consent to this overseas storage.
Telegram processes all messages and payments under its own privacy policy.
We disclose information only: to operate the Service as described, if required by law or court order, or to protect the safety of users and the platform.
5. Retention and deletion
We keep data while your account is active and as needed for legal and accounting obligations. You can request deletion of your data by contacting us (below). Note that content already published to a creator's Telegram channel is under that channel's control, and payment records may need to be retained where the law requires.
6. Security
Access to the Service is authenticated through Telegram's signed init data on every request. Data is stored on access-controlled infrastructure. No system is perfectly secure; use of the Service is at your own risk.
7. Children
The Service is not directed at children and is not to be used by anyone under 18. We do not verify age; users are solely responsible for meeting this requirement. If we receive a credible report that a person under 18 is using the Service, we may remove their account and data.
8. International users
Hosting: the Service is hosted on infrastructure in the United States. By using the Service you consent to your information being processed and stored there.
Australia: we handle personal information consistent with the Australian Privacy Principles, including APP 8 (cross-border disclosure) via this notice.
India: for users in India, we act consistent with the Digital Personal Data Protection Act 2023. You may exercise your rights (access, correction, erasure) or raise a grievance via the contact below; we respond within a reasonable period. We do not process payment card data — payments are handled entirely by Telegram.
United States: the Service is not directed at children under 13 (and requires users to be 18+). We do not sell personal information.
Deletion requests from any jurisdiction: message us via the contact below and we will delete your data, subject to records we must keep by law.
9. Your rights
You may request access to, correction of, or deletion of your personal information, or complain about a privacy breach, by contacting us. If you are unsatisfied with our response you can contact the Office of the Australian Information Commissioner (OAIC).
10. Changes
We may update this policy; the "last updated" date above will change and material updates will be signposted on this page.