Privacy Policy
Last updated: 2026 Nov 5
1. Who We Are
Cabi.Chat (cabi.chat) provides automated outreach and lead discovery infrastructure operating within the Telegram ecosystem.
For privacy-related inquiries: firstfortop@proton.me.
2. Who This Policy Covers
This policy applies to three categories of people:
Platform clients — individuals or entities who register for and operate campaigns through the platform.
Correspondents — individuals who are contacted through platform-operated accounts as part of a campaign.
Visitors — anyone who opens Cabi.Chat pages, signed in or not, and visitors of other websites whose owners have added the Cabi.Chat analytics snippet (see section 9).
3. Data We Collect
From clients:
- Account registration information
- Campaign configurations and knowledge base content
- Crypto wallet addresses associated with deposits
- Transaction and balance history
- Usage activity within the platform dashboard
From correspondents:
- Publicly visible Telegram activity used as targeting signals
- Conversation content generated through platform-operated accounts
- Telegram identity information available from public group participation
From visitors:
- Analytics data described in section 9
4. How We Use the Data
Client data is used to operate accounts, process payments, deliver campaign results, and maintain the platform.
Correspondent data is used to identify outreach targets matching campaign configurations and to conduct and log conversations on behalf of platform clients.
We do not sell data to third parties. We do not use data for advertising.
Partner attribution. When a payment is made with a partner's coupon or link, we link that payment to the partner to calculate their share.
5. Legal Basis for Processing (GDPR)
Clients: Processing is necessary for the performance of a contract.
Correspondents: Processing is based on legitimate interests in providing outreach services to platform clients. Correspondent data is sourced from publicly accessible Telegram activity.
Visitors who are not signed in: Analytics that uses an identifier is based on your consent, which you can withdraw at any time in Privacy settings. Counting page views without an identifier is based on legitimate interests in showing project owners the reach of their pages.
Signed-in users: Statistics of views and impressions are part of the service provided under the Terms of Service and are processed for the performance of that contract.
Security logs and outbound link clicks: Processing is based on legitimate interests in keeping the platform secure, protecting it against abuse and operating it.
6. Infrastructure and Data Storage
Data is processed and stored in accordance with EU data protection standards.
7. Data Retention
Client account data is retained for the duration of the account and for a reasonable period following closure for legal and operational purposes.
Conversation and campaign data is retained while the account is active. Clients may request deletion of their campaign data.
Analytics data and server logs are kept for the periods stated in section 9.
8. Data Sharing
We do not sell or share personal data with third parties except:
- Infrastructure and hosting providers acting as data processors under appropriate agreements
- Where required by law or legal process
Partners of the partner program see only the amounts attributed to them, not the personal data of the users they referred.
9. Analytics, Cookies and Local Storage
Cabi.Chat is a marketing platform: showing project owners how their pages are found and seen is part of the service. For this we run our own first-party analytics. We do not use third-party analytics, advertising networks or tracking pixels, and analytics data is not sold or used to target ads.
This section applies to the web app, the Telegram Mini App and the desktop app.
Visitors who are not signed in: your choice. When you open Cabi.Chat without being signed in, we ask whether you accept analytics. Accepting and declining are equally easy, and Cabi.Chat works the same either way.
- Before you choose, and if you decline: nothing that could recognise you is stored in your browser, and your page views, impressions and clicks inside Cabi.Chat are not recorded. Each page you open only adds one to the number of views of that page for that day. This count carries no identifier, no IP address and no browser details. Project owners see it as visits from visitors who declined tracking. Links to other websites and error reports are handled as described under «Recorded for everyone» below.
- If you accept: Cabi.Chat stores a random anonymous identifier in your browser and records the activity listed below with it.
Your choice is kept in your browser's local storage, so we do not ask again on every visit. You can change it at any time in Privacy settings in the profile menu. If you switch to declined, the anonymous identifier is removed from your browser and nothing more is recorded with it.
In the Telegram Mini App you are usually signed in with your Telegram account. Until you are signed in there, Cabi.Chat treats you as having declined and does not show the question.
Signed-in users. When you are signed in, the views and impressions of pages and cards are part of the service you use under the Terms of Service: they make up the statistics project owners see. They are recorded with your Cabi.Chat account, whatever you chose before signing in, and the analytics question is not shown. Signing in stores nothing new for analytics in your browser. Activity from your browser before you signed in is linked to your account only if you had accepted analytics; if you declined or never chose, there is nothing to link.
What is recorded when you are signed in, or when you have accepted analytics:
- Page views: the page opened, the referring page, campaign tags in the link (UTM parameters), page load time and the time of the visit.
- Impressions and clicks: which cards and projects were shown to you (in the feed, in search results, as mentions), which ones you opened, how long a feed section stayed in view, and your swipe reactions.
- Searches you run on Cabi.Chat, together with the results shown and opened, to improve search.
- Technical data your browser sends with these records: IP address and browser / device type (user agent).
Recorded for everyone, whatever your choice:
- Clicks on links to other websites that pass through the Cabi.Chat redirect: the link, the page or source it came from, campaign tags, the time, the IP address and the browser type. We keep them to protect visitors and the platform against abuse and to show project owners how many clicks their links get; they are not linked to your Cabi.Chat account.
- Error reports when the app fails in your browser (the page, the error and the browser type), to fix the failure. They carry an identifier only if you are signed in or have accepted analytics.
Identifiers. The anonymous identifier is a random value with nothing about you in it. It is stored only after you accept and stays until you decline in Privacy settings or clear your browser's site data. A separate session identifier marks one visit and is replaced after a period of inactivity; it is kept in your browser only after you accept. Analytics does not use cookies.
Why we use it:
- To show project owners the reach of their pages: views, unique visitors, impressions, sources and campaigns.
- To improve Cabi.Chat, including the ordering of search and feed results.
- To keep the platform secure and protect it against abuse.
Who sees it. Project owners see only aggregated figures for their own pages: counts of views, impressions, clicks and unique visitors, by page, source and campaign, and, separately, the number of views from visitors who declined tracking, by page and day. They do not see who you are, your IP address or your individual activity. Individual records are accessible only to Cabi.Chat.
Security logs. Our servers log incoming requests (IP address, page requested, referring page, browser) to protect Cabi.Chat against abuse and attacks. This applies to every request, whatever your analytics choice, because it is needed to keep the service safe. These logs are used to keep the service secure, to protect it against abuse and to measure the overall traffic of our servers, and are deleted after 30 days.
Websites using the Cabi.Chat snippet. Owners of other websites may add the Cabi.Chat analytics snippet to their pages. On those websites Cabi.Chat records page views (page, referring page, campaign tags, load time, IP address, browser) on behalf of the site owner, with an anonymous identifier stored in that website's local storage. This data is not linked to a Cabi.Chat account, and the site owner sees it only in aggregate, as described above. The site owner is responsible for informing its visitors and, where required, for obtaining their consent.
Retention. Page views, impressions, clicks and link-click records are deleted automatically 12 months after the event. Error reports are deleted after 6 months. Security logs are deleted after 30 days. Counts of views from visitors who declined tracking contain no personal data and are deleted after 12 months.
Cookies. We use only strictly necessary cookies: one keeps you signed in, and one tells the web app that you are signed in. No third-party or advertising cookies are used. Your analytics choice is kept in your browser's local storage, not in a cookie.
Your choices. If you are not signed in, you choose in the analytics question and can change your choice at any time in Privacy settings in the profile menu. When you are signed in, statistics of views and impressions are part of the service and cannot be switched off while you stay signed in. Browser privacy tools or content blockers can block analytics requests, and Cabi.Chat does not respond to "Do Not Track" browser signals. You can also use your rights in section 10, including the right to object to processing and to request erasure.
10. Your Rights
If you are located in the European Union or European Economic Area, you have the following rights under GDPR:
- Right to access the data we hold about you
- Right to correction of inaccurate data
- Right to erasure
- Right to restriction of processing
- Right to data portability
- Right to object to processing
To exercise any of these rights, contact us at firstfortop@proton.me. We will respond within 30 days.
11. Security
We implement appropriate technical and organizational measures to protect data against unauthorized access, loss, or disclosure. No method of transmission or storage is completely secure and we cannot guarantee absolute security.
12. Changes to This Policy
We may update this policy at any time. The date at the top of this document reflects the most recent revision. Continued use of the platform following an update constitutes acceptance of the revised policy.
13. Contact
For any questions or requests related to this privacy policy: