Privacy Policy

Who we are

CYBERBOT LTD, a company registered in Scotland (company number SC565548), address: 20 Ayr Road, Giffnock, Glasgow, G46 6RY, United Kingdom. We operate the CyberBot website. Contact: [email protected].

What we collect

• Email address — to create your account and let you sign in.
• Password — stored only as a cryptographic hash (bcrypt). We never store or see your actual password.
• WhatsApp number or Telegram username — only if you gave them earlier: the site no longer asks for them, contact goes through the TaviChat app.
• Approximate location — the country and city we work out from your network address, and the country if you chose it yourself when signing up. We never ask your device for its location, and we store no coordinates and no street address.
• Device information — device model, operating system version and browser version.
• Network address (IP) — stored when you sign in, together with the country and city derived from it. We keep it for up to 90 days and use it only to detect referral abuse and protect payouts.
• Browser fingerprint — an anonymous hash computed in your browser (no raw device characteristics leave your device). Used together with the network address to spot several accounts run by one person.
• Withdrawal wallet addresses — the crypto addresses you have withdrawn to. Kept to protect payouts and to detect referral abuse.
• Notification subscription — an address issued by your browser’s push service, if you turned notifications on.
• Name and profile photo — you give your name when you sign up, and a photo only if you upload one yourself. The photo is available at a public link and other users of the platform can see it.
• X account — only if you link it yourself: the username, account number and the date the account was created, so we can count your likes, reposts, comments and quotes.
• Reviews and video links — only if you send them yourself. The author’s name on a review is shown on the site.

What we do NOT collect

• Precise location, movement history, or your addresses.
• Your phone contacts, files, microphone or camera. A photo only if you upload one to your profile yourself.
• Card or bank details. We take no card payments and ask for no card data.
• Advertising identifiers. We run no ads and no third-party ad trackers.

Why we use it

To run your account, to send you notifications about the service, and to see basic usage statistics (how many devices, which countries, which browser versions). We do not sell your data and do not share it with data brokers.

Who else sees it

Below are the services that help us run CyberBot and what they receive. We may also disclose data where the law requires it.

• Hostinger (Germany) — the server that runs our website and database.
• Your browser’s push service (Google, Apple or Mozilla, depending on your browser) — delivers notifications if you turned them on.
• Postmark (USA) — delivers our emails: confirmation codes, password reset links and service notices.
• Cloudflare — protects the site and routes traffic to our server; at sign-in and sign-up it checks that you are not a bot.
• Telegram — only internal notifications to our team about new sign-ups, deposits and withdrawals (name, email, country, amounts and wallet addresses); we do not correspond with you there. TaviChat — the app you connect to your account: it delivers money notifications, withdrawal confirmation codes, news and your conversation with support.
• X — only if you link your account: we query X to count your likes, reposts, comments and quotes of our posts.
• Polymarket (Amazon Web Services storage) — your browser loads the market pictures in the log directly from there, so they can see your network address.

How long we keep it

Account data is kept while your account exists. The sign-up email confirmation code works for 30 minutes; the code for adding an email and the password reset link work for 15 minutes. Money records — deposits, withdrawals, package purchases and credits — are kept after the account is deleted, but without your name, email or contacts: we need them for accounting.

Your rights

You can ask us to show, correct, or delete your data, or to stop processing it. Write to [email protected] and we will respond within 30 days. You can turn off notifications at any time in your browser settings — the site keeps working.

Deleting your account

Email [email protected] from the address you registered with and ask us to delete your account. We immediately erase your name, email, phone and other contacts, profile photo, messages on the site, sign-in logs and device records. Records of deposits, withdrawals and purchases remain, but without your name, email or other personal data.

Children

The site is not intended for anyone under 18, and we do not knowingly collect their data.

Changes

If this policy changes, we update the date at the top of this page. Material changes will also be announced on the site.