This policy explains what FanDesk (operated by LyboTechGroup, Australia)
collects, why, and your choices. We aim to comply with the Australian Privacy Act 1988 and the Australian Privacy Principles.
1. What we collect
Telegram account basics: your numeric Telegram ID, first name, and username (if set) — provided by Telegram when you open the bot or Mini App. We never see your phone number or contacts.
Content you create: questions, answers, shoutout text, product listings and delivery content, profile links, reactions.
Payment records: the amount of Stars, what was purchased, and Telegram's payment charge ID. Payments are processed entirely by Telegram — we never receive or store card numbers or banking details.
2. Anonymous questions — our anonymity commitment
Questions are anonymous to the creator: creators never see who asked. The platform stores the link between a question and the asking account solely so we can enforce blocking, rate limits, moderation, and legal obligations.
We never reveal, sell, or share the identity of an anonymous asker — not to creators, not to advertisers, not to any third party.
We do not offer, and will not offer, any paid "reveal" or "hint" feature that deanonymises senders.
We do not share anonymous question content linked to identities with anyone. Any analysis we do is on aggregated, de-identified data only.
The sole exception is a valid legal requirement (such as a court order), or where disclosure is necessary to prevent serious and imminent harm.
3. How we use information
To operate the Service: deliver questions, publish answered Q&As to connected channels, run leaderboards, process purchases, deliver products.
To keep the Service safe: moderation, spam and abuse prevention, enforcing blocks.
To improve the Service: aggregate, de-identified usage analysis.
We do not sell your personal information, and we do not use your content for advertising.
4. Where data lives and who sees it
Data is stored on infrastructure provided by our hosting provider (currently Railway), which may be located outside Australia (including the United States). By using the Service you consent to this overseas storage.
Telegram processes all messages and payments under its own privacy policy.
We disclose information only: to operate the Service as described, if required by law or court order, or to protect the safety of users and the platform.
5. Retention and deletion
We keep data while your account is active and as needed for legal and accounting obligations. You can request deletion of your data by contacting us (below). Note that content already published to a creator's Telegram channel is under that channel's control, and payment records may need to be retained where the law requires.
6. Security
Access to the Service is authenticated through Telegram's signed init data on every request. Data is stored on access-controlled infrastructure. No system is perfectly secure; use of the Service is at your own risk.
7. Children
The Service is not directed at children and is not to be used by anyone under 18. If we become aware that a person under 18 is using the Service, we may remove their account and data.
8. Your rights
You may request access to, correction of, or deletion of your personal information, or complain about a privacy breach, by contacting us. If you are unsatisfied with our response you can contact the Office of the Australian Information Commissioner (OAIC).
9. Changes
We may update this policy; the "last updated" date above will change and material updates will be signposted on this page.