隐私政策 — TG Cerber

In this Policy, "operator" means the party that determines why and how personal data is processed (the "controller" under the EU GDPR); "processor" means a party that processes data on the operator's behalf and instructions.

• 对于网站访客和账户持有人的个人数据（例如联系、账单和支持数据），TGCerber 作为运营者。
• 对于您通过本服务连接和归档的内容（Telegram 消息、文件以及您连接的账户的账户/会话元数据），TGCerber 作为处理者代表客户组织行事，该组织是该内容的运营者。客户决定归档哪些内容以及谁有权访问，并负责处理的合法依据（参见条款第8节）。对于本地部署，该内容保留在客户的基础设施中，我们不访问它。

2.1. 网站和账户数据（作为运营者）：

• identification and contact data (name, company, email, phone);
• account and authentication data;
• billing and transaction data (handled by payment providers; we do not store full card numbers);
• support communications;
• 技术和使用数据（IP地址、设备和浏览器数据、日志）以及cookies。

2.2. 服务内容（作为处理者，代表客户）：

• messages and files from the Telegram accounts the customer connects and selects for archiving;
• 关联账户的会话、设备和登录元数据。

We process data for which we are the operator to: provide and secure the Service and website; manage accounts, billing, and support; comply with legal obligations; and improve and protect the Service. Depending on your location, our legal bases include performance of a contract, our legitimate interests, consent (for example, certain cookies), and compliance with law. Content for which we act as processor is processed only on the customer's documented instructions.

本网站可能会使用必要的 Cookie，并在需要同意的情况下使用分析 Cookie。您可以在浏览器中管理 Cookie，并在提供的情况下通过同意横幅进行管理。

We share personal data only as needed: with service providers acting on our behalf (for example, hosting, infrastructure, payment, and support tools) under appropriate confidentiality and data-protection terms; when required by law or to protect rights and safety; and in a merger, acquisition, or sale of assets. We do not sell personal data.

我们的总部设在瑞士。当个人数据被传输到瑞士或EEA之外时，我们依赖充分性决定或适当的保障措施（如标准合同条款）。

We keep personal data only as long as necessary for the purposes above or as required by law. For archived Service content, retention follows the customer's settings and the Terms (Section 8.5): after a paid archive plan ends, data remains available to view and export for a limited period, then is stored encrypted without access until scheduled deletion; exact dates are shown in the account.

We apply reasonable technical and organizational measures, including encryption of the archive (with the customer's key in the cloud option; keys and data remaining within the customer's perimeter for on-premises deployments). A lost encryption key cannot be recovered by us. No method of protection is absolute, and we cannot guarantee absolute security.

根据适用法律（包括瑞士联邦数据保护法，以及在相关情况下，欧盟 GDPR），您可能有权访问、更正、删除、限制或反对处理您的个人数据，以及数据可携性，并撤回同意。您也可以向监管机构提出投诉——在瑞士，是联邦数据保护和信息专员（FDPIC）。如需行使我们作为运营者的数据相关权利，请通过 info@oqtacore.com 联系我们。

United States. There is no single US federal privacy law; instead, state consumer-privacy laws may apply. If you are a resident of a US state with such a law — for example, the California Consumer Privacy Act (CCPA), as amended by the CPRA, and comparable laws in states such as Virginia, Colorado, Connecticut, and Utah — you may have the right to know about, access, correct, delete, and obtain a copy of your personal data, and to opt out of the "sale" or "sharing" of personal data and of certain targeted advertising. We do not sell your personal data, and we will not discriminate against you for exercising these rights. Sector-specific US laws (for example, on health or financial data) may also apply where relevant.

Requests about archived Service content: because the customer organization is the operator of the content it connects and archives, please direct such requests to that organization; we will assist it as its processor.

本服务旨在用于商业用途，不面向16岁以下儿童。

我们可能会更新本政策。重大变更将通过合理方式（例如，在网站上或通过电子邮件）通知。变更生效后继续使用即表示您接受更新后的政策。

Oqtacore Sàrl

Route de Divonne 44, 1260 Nyon, Switzerland

电子邮件: info@oqtacore.com

支持: @TGCerbersupportbot (Telegram)