Privacy Policy

Tdgram (“TDGram”, “we”, “our”, “us”) is owned and operated by Cronweb Solutions Private Limited.

This Privacy Policy explains how we collect, use, store, disclose, and protect information when you visit TDGram, create an account, purchase services, communicate with us, use our API, participate in our affiliate program, or otherwise use our websites, applications, and related services.

By accessing or using TDGram, you acknowledge this Privacy Policy.

1. Scope

This Privacy Policy applies to TDGram-operated websites, dashboards, applications, APIs, support systems, payment-related pages, and other services that link to this Privacy Policy.

A separately branded reseller or white-label panel may have its own privacy practices and policies. Where another business independently operates a panel or determines how personal information is used, that business may also have its own responsibilities regarding your information.

2. Information We Collect

2.1 Account Information

When you create or use an account, we may collect information such as:

• name;
• username;
• email address;
• password in securely hashed form;
• telephone or WhatsApp number where provided;
• preferred language;
• timezone;
• preferred display currency;
• profile information;
• account status and security settings.

We do not store your password in plain text.

2.2 Social Login Information

If you choose to sign in using an available third-party authentication provider, such as Google or Facebook, we may receive information permitted by that provider, which may include:

• your provider account identifier;
• name;
• email address;
• profile image.

We do not receive your password for the third-party service.

2.3 Order and Service Information

When you place an order, we may process:

• selected service;
• public social-media profile, post, video, channel, page, or other URL;
• requested quantity;
• order amount;
• service and provider identifiers;
• order status;
• start count and remaining quantity where applicable;
• refill or cancellation requests;
• technical information required to fulfil the service.

TDGram does not require your social-media account password for standard SMM services. You should never submit a social-media password into an order link or support message unless a specific feature expressly and legitimately requires credentials.

3. Payment and Financial Information

When you add funds or make a payment, we may collect and maintain information such as:

• transaction amount;
• currency;
• payment method;
• gateway reference;
• transaction status;
• payment timestamps;
• proof of payment where applicable;
• limited payer information returned by a payment processor;
• internal wallet and ledger records;
• bonuses, refunds, adjustments, affiliate payouts, and related accounting records.

Payment-card, bank, UPI, cryptocurrency, or other payment credentials may be processed directly by third-party payment providers.

We generally do not receive or store complete payment-card numbers or security codes unless a specific payment method explicitly requires information to be submitted to us.

Payment providers have their own privacy practices.

4. Technical and Usage Information

We may automatically collect technical information including:

• IP address;
• browser type;
• operating system;
• device information;
• user agent;
• referring page;
• visited pages;
• login activity;
• session information;
• security events;
• API activity;
• error and diagnostic information;
• approximate location derived from IP address where necessary for security or functionality.

We may use this information for security, fraud prevention, troubleshooting, performance, analytics, and service improvement.

5. Cookies and Similar Technologies

TDGram may use cookies, local storage, session storage, and similar technologies for purposes including:

• authentication;
• keeping you signed in;
• remembering preferences;
• language and appearance settings;
• security;
• CAPTCHA functionality;
• referral attribution;
• affiliate tracking;
• fraud prevention;
• application functionality.

Some functionality may not work correctly if essential cookies are blocked.

Where required by applicable law, we will seek consent before using non-essential cookies or similar technologies.

6. CAPTCHA and Anti-Abuse Services

We may use CAPTCHA or anti-abuse services, including Cloudflare Turnstile or other configured providers, to protect registration, login, contact, newsletter, or other forms.

Such providers may process technical information necessary to determine whether a request appears to originate from a human user or automated software.

7. Affiliate and Referral Information

If you participate in the TDGram affiliate program or visit through a referral link, we may process:

• referral identifiers;
• referral-link visits;
• registration attribution;
• eligible referred transactions;
• commissions;
• commission status;
• payout requests;
• payout records.

Detailed referral-visit data may be retained for a limited period while aggregated statistics and financial records may be retained longer where necessary.

8. Support and Communications

When you contact us, open a ticket, submit a contact form, or otherwise communicate with TDGram, we may process:

• your contact information;
• message content;
• attachments;
• related account or order information;
• support history;
• delivery and read information where available.

Please avoid including passwords, private authentication credentials, payment-card security codes, or unnecessary sensitive information in support communications.

For general inquiries, please use our Contact page at /contact.

9. How We Use Information

We may use information to:

• create and maintain accounts;
• authenticate users;
• process orders;
• communicate with external service providers;
• calculate prices;
• maintain wallet balances;
• process payments;
• verify payment notifications;
• process refunds and adjustments;
• provide refill and cancellation functionality;
• manage affiliate referrals and commissions;
• operate reseller functionality;
• provide customer support;
• send account and service notifications;
• send transactional email;
• prevent fraud and abuse;
• enforce our Terms;
• secure accounts and infrastructure;
• detect duplicate or suspicious payments;
• maintain accounting records;
• improve website functionality;
• diagnose technical problems;
• comply with legal obligations.

We do not sell personal information as a standalone commercial product.

10. Legal Bases and Permitted Processing

Depending on your jurisdiction, we may process personal information where processing is:

• necessary to provide a service you requested;
• necessary to perform a contract with you;
• necessary to comply with legal obligations;
• necessary for legitimate business interests such as security, fraud prevention, and service improvement;
• based on your consent where consent is legally required;
• otherwise permitted by applicable law.

11. External Service Providers

TDGram depends on third-party services in order to operate.

These may include:

• SMM service providers;
• hosting and infrastructure providers;
• payment processors;
• email-delivery providers;
• CAPTCHA providers;
• social authentication providers;
• customer-support tools;
• fraud-prevention services;
• currency-data providers;
• analytics and monitoring services.

We may provide such parties with information reasonably necessary to perform the requested function.

A service provider may process data in another country and may have its own legal obligations.

12. Social Media Platforms

Orders may involve publicly available URLs or identifiers associated with third-party social-media services.

TDGram is an independent service and is not necessarily affiliated with, sponsored by, or endorsed by the social networks for which services appear in our catalogue.

Third-party social networks operate under their own terms and privacy policies.

You are responsible for understanding the rules that apply to your accounts and content.

13. Data Sharing

We may disclose information:

• to service providers necessary to fulfil an order;
• to payment processors;
• to infrastructure and technical providers;
• to an authorized reseller where the account belongs to that reseller's panel;
• where necessary to investigate fraud, abuse, security incidents, or chargebacks;
• where required by law, court order, or lawful government request;
• in connection with a merger, acquisition, restructuring, or sale of relevant business assets;
• where you direct or authorize us to disclose information.

We do not publicly disclose private account information merely because an order relates to a public social-media URL.

14. Data Retention

We retain information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including:

• account operation;
• order fulfilment;
• financial reconciliation;
• fraud prevention;
• dispute handling;
• legal compliance;
• tax and accounting requirements;
• security.

Different categories of information may have different retention periods.

Financial and transactional records may need to be retained longer than ordinary technical logs.

Inactive, abandoned, temporary, or low-value technical data may be deleted or aggregated earlier.

15. Data Security

We use reasonable administrative, technical, and organizational safeguards designed to protect information from unauthorized access, alteration, disclosure, or destruction.

Measures may include:

• password hashing;
• encrypted secrets;
• access controls;
• session protections;
• permission controls;
• payment verification;
• signed webhook verification;
• transaction and duplicate-processing safeguards;
• monitoring and logging.

However, no internet service, network, database, or storage system can be guaranteed to be completely secure.

You are responsible for keeping your password, API keys, devices, and account access secure.

16. API Keys

If TDGram provides you with an API key, you must treat it as confidential.

Do not expose an API key in:

• public repositories;
• browser-side JavaScript;
• screenshots;
• public logs;
• support posts;
• applications you do not control.

Activity performed using your valid credentials may be treated as activity originating from your account unless we determine otherwise.

17. International Processing

TDGram and its service providers may process information in countries other than the country where you live.

Where applicable law requires safeguards for international transfers, we will take reasonable measures appropriate to the circumstances.

18. Your Rights

Depending on the law that applies to you, you may have rights concerning your personal information, which may include rights to:

• request access;
• request correction;
• request deletion;
• withdraw consent;
• object to certain processing;
• request restriction;
• request data portability;
• submit a complaint to an applicable authority.

These rights are not absolute. We may retain information where required for financial records, fraud prevention, legal compliance, dispute resolution, or other lawful reasons.

To submit a privacy-related request, please use /contact and clearly identify the nature of your request.

We may need to verify your identity before fulfilling a request.

19. Account Deletion

Where account deletion is available or legally required, certain information may nevertheless be retained where reasonably necessary for:

• financial records;
• fraud prevention;
• payment disputes;
• chargebacks;
• legal claims;
• regulatory requirements;
• enforcement of our agreements.

Deletion of an account does not necessarily require deletion of transaction records that we are legally or operationally required to preserve.

20. Children's Privacy

TDGram is not intended for children under 18 years of age.

You should not create an account or use paid services if you are under 18 unless applicable law lawfully permits you to do so and any required parental or guardian authorization has been obtained.

If we become aware that information was collected from a child in violation of applicable law, we may take appropriate steps to remove it.

21. Automated Systems

Certain TDGram functions may operate automatically, including:

• order dispatch;
• provider synchronization;
• order-status updates;
• fraud controls;
• payment verification;
• refill processing;
• notifications;
• affiliate calculations.

Automated processing does not remove your right to contact us where you believe an account, payment, or order has been handled incorrectly.

22. Changes to This Privacy Policy

We may update this Privacy Policy when our services, legal obligations, technologies, or business practices change.

The revised policy becomes effective when published unless a later effective date is stated.

Where required by applicable law, we may provide additional notice of material changes.

23. Contact

For privacy questions, legal requests, complaints, or other inquiries concerning this Privacy Policy, please use the TDGram Contact page at /contact.