Draft for legal review
Privacy Policy
Effective 31 October 2026 · Version 2026-10-31
ChannelShift is operated by AZ IT Solutions. This draft is written for customers in India and the Digital Personal Data Protection Act 2023. It describes what this software actually stores. A lawyer should review it before you rely on it. Questions and grievances: support@channelshift.in.
Who we are
AZ IT Solutions provides ChannelShift, a tool that lets a Telegram channel owner send a one-time invite to a new channel when a member leaves the old one. For the owner's own account, AZ IT Solutions decides why that data is used. For the people in the owner's channels, the owner decides why the data is used and we process it on the owner's instructions.
What we store
About the channel owner, from Telegram Login: Telegram user id, name, username, and profile photo URL. An email address if you add one. We do not ask for your phone number or a Telegram login code. The database has an optional phone field that stays empty unless you later give us a number.
About your bot: the bot's numeric id and username, and the bot token. The token is encrypted before it is saved. We also store a webhook secret so Telegram can call your bot, and the last error if a check fails.
About your channels: the channel id, title, username, whether it is private, and the admin rights we last saw on the bot.
About members of your channels, as Telegram sends them: Telegram user id, username, first name, and last name, plus whether they have started or blocked the bot. We also store join requests, leave events, and the one-time invite links we create. In your dashboard and exports a member is shown only as a first name and last initial, for example "Priya S.". The username and Telegram id are not shown there.
About billing: Razorpay's payment id, amount, currency, status, and the method name they report (such as UPI or card). We do not store card numbers or UPI ids. If you add them, we store the invoice name, address, state, GSTIN, and billing email, and the invoice we issue. Consent to this policy: the policy version you accepted, the time, and the IP address of that request.
For security: the IP address and browser string on a sign-in session, and the IP address on consent and audit records. Application logs are kept to run the service. Bot tokens are stripped out of those logs.
Why we use it
To open your workspace, run the bot, show you the dashboard, take payment, issue invoices, keep a free trial from being claimed twice, and protect the service. We do not sell personal data. We do not use it for advertising.
The legal basis in this draft is your consent, given by the checkbox at signup, and the work you ask us to do for your channels. Member data is processed for you. You are responsible for telling your members that their leave from your old channel can cause your bot to message them, and for having a proper reason to do that.
How long we keep it
If you never pay, the workspace is kept for 30 days after the trial ends. If you paid, it is kept for 180 days after the last paid period. You can ask us to delete it sooner. Invoices are kept for the period Indian tax law requires. Daily database backups are kept for 30 days and then deleted. The consent record is kept so we can show which policy version you accepted.
Who else handles it
Telegram, to deliver bot messages and login. Razorpay, to take payment. They see card and UPI details. We do not. The application and database run on a Hostinger VPS in Mumbai, India. Email is not connected yet. When it is, renewal messages will go through the email provider named in the server configuration. We do not send your data to an advertising network.
Your rights
You can ask for a copy of your workspace data, a correction, or deletion. Write to support@channelshift.in. That address is also the grievance contact for this draft. A named grievance officer will be confirmed before this policy leaves draft. If you withdraw consent, we stop the account. Some invoice records may have to stay for tax.
Channel members should contact the channel owner first. We act on the owner's instructions for that data.
Security
The site is served over HTTPS. Bot tokens are encrypted at rest with a key that is not stored in the database. Webhook calls are checked with a secret. No method is perfect. Please use a bot that you control.
Cookies
The only cookie is a sign-in session cookie (HttpOnly, Secure, SameSite). We do not use advertising or analytics cookies.
Children
ChannelShift is for channel owners who are 18 or older. It is not directed at children.
Changes
If this policy changes in a way that matters, we change the version (now 2026-10-31) and ask you to agree again before you continue. The date at the top is the effective date of this draft.