Privacy Policy

This policy explains what Rallyora collects and how it's used, for every account on the platform — admin, reseller, and customer — and for anyone who submits an inquiry through our public site without an account. It works alongside our Terms of Service and Acceptable Use Policy.

Account information: your email address, role, and account status.

Campaign content: the message text, destination links, and target categories you submit for review and delivery.

Payment records: order and transaction history. Card payments are processed by Stripe and cryptocurrency payments by our crypto payment processor — we do not receive or store your full card number, and on-chain transactions are recorded on the relevant public blockchain by nature of how cryptocurrency works.

Telegram delivery credentials: where the platform operates its own Telegram bot or session-based delivery accounts, those credentials are encrypted at rest and accessible only to platform administrators — never to other customers or resellers.

Inquiries: if you submit a reseller or channel-partner inquiry through our public site, we collect the name, email, and message you provide.

Sign-in state: we use your browser's local storage to keep you signed in between visits. We do not use third-party advertising or tracking cookies.

To operate your account and deliver campaigns; to review submitted campaigns against our Acceptable Use Policy before they run; to process payments and manage billing; to respond to support requests and the inquiries described above; and to maintain records of campaign review, payment, and enforcement decisions for accountability and dispute resolution.

Payment processors (Stripe and our cryptocurrency payment processor) to process payments. Telegram, necessarily, since campaign delivery happens on Telegram's own platform. We do not sell personal data, and we do not share campaign or account data with other customers or resellers beyond what a reseller organization can see about its own customers and team.

Campaign review history, payment records, and enforcement actions (bans, suspensions, abuse reports) are retained beyond account closure where needed for accountability, dispute resolution, or legal obligations — this is a deliberate part of how the platform operates, not an oversight. Other account data is retained for as long as your account is active, or as needed to resolve any open campaigns or payments.

Sensitive credentials (Telegram delivery sessions and bot tokens) are encrypted at rest. Access to account, campaign, and financial data is controlled by role — for example, a reseller's team member with campaign-only access cannot see that reseller's financial records. No system is perfectly secure, and we can't guarantee against every possible compromise, but access is scoped deliberately, not left open by default.

You can contact us at any time to ask what data we hold about you, to correct it, or to request deletion. We'll fulfill deletion requests except where we're required to retain specific records for the accountability and legal reasons described in Section 5, in which case we'll tell you what's being retained and why.

We may update this policy as the platform evolves. Material changes will be reflected here with a new effective date.

Questions about this policy, or requests about your data, can be sent to [email protected].