Sofi CRM ("we", "us", "our") operates the Sofi CRM platform — a fan relationship management SaaS product for Telegram content creators. This Privacy Policy describes how we collect, use, and protect your personal data when you use our website and Service.
Data controller contact: support@soficrm.com
When you register, we collect:
To connect your Telegram account, we store:
These credentials are used exclusively to operate the Sofi bot on your behalf. We do not use them for any other purpose.
The Service processes data about your Telegram fans on your behalf, including:
You are the data controller for this fan data. We process it as your data processor. You are responsible for ensuring you have a lawful basis to collect and process this data.
We use Stripe, Inc. to process payments. When you subscribe:
Stripe may collect additional device and behavioral data for fraud prevention. See Stripe's Privacy Policy for details. Stripe is PCI DSS Level 1 certified — the highest level of payment security certification.
| Purpose | Legal Basis | Data Used |
|---|---|---|
| Provide and operate the Service | Contract performance | Account data, Telegram credentials, fan data |
| Process subscription payments | Contract performance | Name, email, billing info (via Stripe) |
| Send transactional emails (receipts, renewal notices, alerts) | Contract performance / Legitimate interest | Email address |
| Improve the Service and fix bugs | Legitimate interest | Usage data, server logs |
| Comply with legal obligations | Legal obligation | As required by law |
| Prevent fraud and abuse | Legitimate interest | IP address, usage patterns |
We do not sell, rent, or trade your personal data to third parties for marketing purposes.
We share data with the following third parties only as necessary to operate the Service:
Your data is stored on our servers in isolated per-tenant databases. Each account's data is strictly separated from other accounts.
We implement the following security measures:
No system is 100% secure. In the event of a data breach affecting your personal data, we will notify you as required by applicable law.
Depending on your location, you may have the following rights regarding your personal data:
To exercise any of these rights, contact us at support@soficrm.com. We will respond within 30 days.
We use essential cookies only:
We do not use tracking, analytics, or advertising cookies.
The Service is not directed at persons under 18 years of age. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, contact us immediately and we will delete it.
If you are a California resident, the California Consumer Privacy Act (CCPA) grants you additional rights:
To submit a CCPA request, contact us at support@soficrm.com. We will respond within 45 days.
Your data may be processed by our third-party service providers (Stripe, xAI, Groq) in countries outside your jurisdiction. Where required, we rely on appropriate transfer mechanisms (such as standard contractual clauses) to ensure your data is adequately protected.
We may update this Privacy Policy from time to time. Material changes will be communicated via email at least 14 days before they take effect. Continued use of the Service constitutes acceptance of the updated policy.
For privacy-related questions or requests:
We aim to respond to all privacy requests within 30 days.
If you are located in the European Economic Area (EEA) and believe we have not addressed your privacy concern adequately, you have the right to lodge a complaint with your local supervisory authority. A list of EU data protection authorities is available at edpb.europa.eu.
If you are located in the United Kingdom, you may contact the Information Commissioner's Office (ICO) at ico.org.uk.