Privacy Policy
1. Introduction
This Privacy Policy describes how SlotsHunter UAE ("we", "us", "our") collects, uses, and protects personal data when you use SlotsHunter UAE ("Service"). By using the Service, you consent to the practices described here.
2. Data We Collect
We collect the minimum data required to operate the Service:
- Telegram identifiers — your Telegram user ID, username (if set), and first name. We use these to identify subscribers and deliver alerts.
- Payment metadata — when you purchase a subscription, NOMOD processes your payment. We receive a payment confirmation, amount paid, plan code, and a NOMOD payment ID. We never receive or store your card details.
- Agency data (Solo and Team plans only) — agency name, contact email, phone number, and your password (hashed with industry-standard PBKDF2-HMAC). For day-to-day operations, you choose to store client information, VFS account credentials (encrypted at rest using AES via Fernet), and booking records within the agency dashboard.
- Usage data — alert delivery logs, login timestamps, and basic analytics for debugging and capacity planning.
3. How We Use Your Data
We use the data above to:
- Deliver Telegram slot alerts and operate the agency dashboard.
- Process payments and renewals (via NOMOD).
- Provide customer support and respond to your inquiries.
- Improve the Service and detect abuse.
- Comply with applicable UAE law.
We do not sell or rent your data. We do not use your data for advertising.
4. Third Parties
We share data with these third parties strictly as needed to operate the Service:
- Telegram — to deliver bot messages. Telegram processes your messages under its own privacy policy.
- NOMOD — to process payments. NOMOD handles your card data directly; we only receive payment metadata.
- VFS Global — we do not share your data with VFS. The Service monitors public VFS appointment data.
We do not transfer data to other third parties without your consent.
5. Data Security
We protect your data with reasonable technical and organizational measures:
- Passwords are hashed using PBKDF2-HMAC-SHA-256 with per-user salt.
- VFS account credentials you store in the vault are encrypted at rest using AES-128 (Fernet).
- The Service runs on hardened cloud infrastructure with restricted access.
- All web traffic is encrypted via HTTPS (TLS).
No system is perfectly secure. We will notify you promptly if we become aware of a security incident affecting your data.
6. Data Retention
We retain your data for as long as your subscription is active and for up to 24 months after termination, for accounting, dispute resolution, and legal compliance. After this period, data is deleted or anonymized.
You may request earlier deletion by contacting us. Some data may be retained longer where required by UAE law (e.g., payment records for tax purposes).
7. Your Rights
Subject to applicable UAE law, you have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate data.
- Request deletion of your data (subject to retention rules above).
- Export your data in a portable format.
- Withdraw consent (which may end your subscription).
To exercise these rights, contact us at the email address in Section 9.
8. Children
The Service is not intended for users under 18 years of age. We do not knowingly collect data from children. If you believe we have inadvertently collected data from a minor, please contact us for immediate deletion.
9. Contact
For privacy questions or to exercise any rights above, contact: sam.xlcc5@gmail.com.
Data Controller: SlotsHunter UAE
Jurisdiction: United Arab Emirates
10. Changes to This Policy
We may update this policy. Material changes will be notified via Telegram or email where reasonable. Continued use of the Service after changes constitutes acceptance.