Privacy Policy

Effective Date: April 29, 2026

BIS CX (operated by Konstantin Kislov, an Individual Entrepreneur, registered in Georgia) ("Company", "we", "our", "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at https://bis.cx and use our advertising platform for Telegram bots (collectively, the "Service").

Data Controller:
Konstantin Kislov, an Individual Entrepreneur
Address: 8 Lech and Maria Kaczynski Street, Block "B", Apt 103, Batumi, Georgia
Email: support@bis.cx

1. Information We Collect

1.1 Information You Provide to Us. When you register, use the Service, or contact us, you may provide:

• Contact Information: name, email address, company name, phone number.
• Account Credentials: username, password.
• Billing Information: payment method details (balance top-up is done via bank transfer to the Individual Entrepreneur's account; we do not store credit card numbers).
• Profile Information: profile picture, bio, preferences.
• Campaign Data: for Advertisers: ad creative, targeting criteria, budget, campaign performance metrics. For Publishers: bot integration data, impression and click statistics, earnings data.
• Communications: information you provide when you contact us for support or other inquiries.

1.2 Information We Collect Automatically. When you use the Service, we may automatically collect:

• Log Data: IP address, browser type and settings, operating system, access times, pages viewed, links clicked, the website you visited before navigating to our Service.
• Device Information: device type, unique device identifiers, device settings.
• Usage Data: features used, frequency of use, campaign interactions, error reports.
• Cookies and Similar Technologies: we use cookies, web beacons, and similar tracking technologies to collect activity information.

1.3 Information from Third Parties. We may receive information about you from:

• Telegram: if you integrate your bot with our Service, we may receive basic account information (e.g., bot name, bot ID) as permitted by Telegram's API.
• Other Users: Advertisers or Publishers may provide information about you in connection with campaigns or referrals.

2. How We Use Your Information

We use the information we collect for the following purposes:

• To provide, operate, and maintain the Service (performance of contract).
• To process transactions and send related information (e.g., confirmations) (performance of contract).
• To manage your account and provide customer support (performance of contract; legitimate interests).
• To monitor and analyze usage and trends to improve the Service (legitimate interests).
• To develop new products, services, and features (legitimate interests).
• To detect, prevent, and address technical issues, fraud, or illegal activities (legitimate interests; legal obligation).
• To communicate with you about updates, security alerts, and administrative messages (performance of contract; legitimate interests).
• To send marketing communications (where permitted by law) (consent where required).
• To comply with legal obligations (legal obligation).

Note on Automated Decision-Making: We do not engage in automated decision-making that produces legal effects concerning you.

3. Sharing Your Information

We may share your information in the following circumstances:

• With Service Providers: We share information with third-party vendors who perform services on our behalf, such as cloud infrastructure providers, analytics providers, and customer support tools.
• With Telegram: If you are a Publisher, your bot interacts with Telegram's API. Your use of Telegram is governed by Telegram's Privacy Policy.
• For Legal Reasons: We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency in Georgia or elsewhere).
• Business Transfers: In connection with a merger, acquisition, reorganization, or sale of all or a portion of our assets, your information may be transferred. We will notify you via email and/or a prominent notice on our Service of any change in ownership or use of your information.
• With Your Consent: We may share your information for any other purpose disclosed to you and with your consent.

No Sale of Information: We do not sell your personal information to third parties. We also do not "share" your information for cross-context behavioral advertising as defined under California law.

4. Data Retention

We will retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law (e.g., for tax, legal, or accounting purposes).

Criteria for Retention Periods:

• Account information: retained until you delete your account, plus a reasonable period for backup and legal compliance.
• Campaign data: retained as long as needed to provide the Service and for analytical purposes, then anonymized.
• Transaction records: retained for 7 years to comply with tax and financial reporting obligations.

When we have no ongoing legitimate business need to process your information, we will delete or anonymize it.

5. International Data Transfers

Your information may be transferred to and maintained on servers located outside your country of residence, including in Georgia and other countries where our service providers operate. Data protection laws in these countries may differ from those in your country.

For EEA and UK Users: When we transfer your personal data outside the European Economic Area or the UK, we ensure an adequate level of protection by using Standard Contractual Clauses approved by the European Commission or other lawful transfer mechanisms as required.

For Canadian Users: We ensure that transfers comply with PIPEDA requirements, including through contractual protections.

For Other Users: By using the Service, you consent to such transfers.

6. Cookies and Tracking Technologies

We use cookies, web beacons, and similar technologies to collect and track information about your activities on our Service.

6.1 Types of Cookies We Use:

• Essential Cookies: Necessary for the Service to function (e.g., authentication, security).
• Analytics Cookies: Help us understand how users interact with the Service (e.g., Google Analytics).
• Functional Cookies: Remember your preferences and settings.
• Marketing Cookies: Used to deliver relevant advertisements (only with your consent where required).

6.2 Your Cookie Choices:

• Browser Settings: You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent.
• Opt-Out Tools: For analytics cookies, you can use opt-out tools provided by analytics providers.
• Consent Management: On your first visit, we provide a cookie consent banner (for users in jurisdictions requiring consent, such as the EU/UK). You can change your preferences at any time.

Note: Some parts of the Service may not function properly without cookies.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. These measures include encryption of data in transit (TLS/SSL), access controls and authentication, regular security assessments, and secure data storage.

However, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security. You are responsible for maintaining the security of your account credentials.

8. Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information. We will respond to all legitimate requests in accordance with applicable laws.

8.1 For All Users:

• Access: You can request a copy of the personal information we hold about you.
• Correction: You can request correction of inaccurate or incomplete information.
• Deletion: You can request deletion of your personal information, subject to certain exceptions.
• Objection/Restriction: You can object to or request restriction of processing.
• Data Portability: You can request a copy of your information in a structured, commonly used format.

To exercise these rights, please contact us at support@bis.cx. We may need to verify your identity before processing your request.

8.2 For EEA and UK Users (GDPR):

• In addition to the above, you have the right to withdraw consent at any time (where processing is based on consent) and to lodge a complaint with a supervisory authority (e.g., in your country of residence).

8.3 For California Residents (CCPA/CPRA):

• Right to Know: You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources, the business purpose for collection, and the categories of third parties with whom we share information.
• Right to Delete: You have the right to request deletion of personal information we have collected from you, subject to certain exceptions.
• Right to Correct: You have the right to request correction of inaccurate personal information.
• Right to Opt-Out: You have the right to opt out of the "sale" or "sharing" of your personal information. We do not sell or share your personal information as defined by California law.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights.

To exercise your California rights, please contact us at support@bis.cx. You may also designate an authorized agent to make a request on your behalf.

9. Children's Privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us at support@bis.cx. If we learn that we have collected personal information from a child without verification of parental consent, we will take steps to delete that information.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. If we make material changes, we will notify you by email (to the address associated with your account) or through a prominent notice on our Service at least 30 days before the changes take effect.

We encourage you to review this Privacy Policy periodically. Your continued use of the Service after the effective date of any changes constitutes your acceptance of the updated policy.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Data Protection/Privacy Officer: Konstantin Kislov
Email: support@bis.cx
Address: 8 Lech and Maria Kaczynski Street, Block "B", Apt 103, Batumi, Georgia
Response Time: We aim to respond within 5 business days.

Last updated: April 29, 2026