Privacy Policy
Updated: March 21, 2026
1. Data We Collect
We may process your contact details (name, email, Telegram), profile data, and bot request history to operate the service.
2. Why We Use Data
Data is used for recommendation personalization, progress display (XP/levels), response quality improvements, and platform security.
3. Storage and Protection
We apply technical and organizational measures to protect data from unauthorized access, loss, or alteration.
4. Sharing with Third Parties
We do not sell personal data. Sharing may occur only with technical providers required to run the platform.
5. Your Rights
Under GDPR and applicable law you have the right to: access your personal data; rectify inaccurate data; erase your data; restrict or object to processing; and request data portability. To exercise these rights, use the contact details on our Contact page. We will respond within 30 days.
6. Data Controller
TeaOcto is an independent project. The data controller for personal data processed through this service is the TeaOcto project operator. For any data-related enquiries, please use the contact details on our Contact page.
7. Retention Periods
Chat history and session data: 90 days. Account profile data: retained for the duration of your account plus 30 days after deletion. Anonymised analytics data: up to 26 months (Google Analytics). Payment records: 7 years (legal obligation).
8. Third-Party Processors
We use the following data processors: Google Analytics — anonymised usage analytics (USA, EU–US Data Privacy Framework); Cloudflare — infrastructure, CDN, and DDoS protection (USA); Anthropic — AI language model powering tea recommendations (USA); Telegram — optional bot integration for authenticated users. Each processor is engaged under appropriate data-processing terms.
9. International Data Transfers
Some processors listed above operate in the United States. Transfers occur under the EU–US Data Privacy Framework or Standard Contractual Clauses where applicable. Users from Ukraine acknowledge that data may be processed outside Ukraine in accordance with applicable law.
10. Cookies and Analytics
We use Google Analytics (GA4) for anonymised usage analytics. Analytics data does not directly identify you. We do not use advertising cookies. Essential session cookies maintain login state and locale preferences. By continuing to use this website, you consent to this use of analytics.