Privacy Policy

01Who this policy covers, and who runs the Service

AML Check Hub is currently operated by an individual operator, not through a separate registered company. References to “we”, “us” or “the Operator” in this policy mean that operator. You can reach us at the contact address at the end of this policy for any privacy request.

02What we collect

• The wallet address(es) you submit for screening, and the resulting Report (score, risk level, category breakdown)
• Your Telegram identifiers — user ID, username if public, and your chosen interface language — since the bot is how most people use the Service
• Basic billing information: which package you bought, the amount, the payment method (crypto / Telegram Stars / SBP / card) and a transaction reference from the payment provider — not your card number or bank credentials, which we never see
• Standard technical logs from the website and the bot's webhook server: IP address, user agent, timestamps and request metadata

03What we never ask for or collect

Private keys, seed phrases, wallet signatures, or any credential that could move funds. Screening only ever needs a public wallet address. We also never see your full card number or bank login — those go directly to the payment provider processing your payment, not to us.

04Why we process it

• To run the Check you request and return a Report
• To track your free-check allowance and paid Credit balance
• To bill for paid usage and reconcile payments with our payment providers
• To detect and prevent abuse of free checks, rate limits, or the Service generally
• To keep a history of your past checks accessible to you in the bot
• To meet our own legal and accounting obligations
• To diagnose problems and improve reliability

05Who we share it with

We share the minimum necessary with these categories of third party, each acting as a processor for the purpose described:

• AML data providers (currently MistTrack) — receive the address you submit, in order to return a risk score for it
• Payment providers (CryptoBot / Telegram, for crypto and Telegram Stars; AuraPay, for SBP and card payments in RUB) — receive what's needed to process your payment; they, not us, handle your payment credentials directly
• Hosting and infrastructure providers for the website and bot server
• Website analytics (Yandex Metrika, on the Russian-language pages only) — standard visit analytics, not tied to your Telegram identity

06International data handling

The providers above may process data in countries other than your own. Where a provider processes data outside your country, we rely on that provider's own safeguards and terms; we choose providers with a legitimate business reputation but do not independently audit their infrastructure.

07Retention

Your check history is kept so it stays available to you in the bot. Technical logs and payment records are kept only as long as needed for the purposes above, or as required by applicable accounting or legal obligations, whichever is longer. You can request deletion of your check history at any time (see Your rights below) — we will retain the minimum billing record required by law even after such a request, where applicable.

08Security

We use standard technical measures appropriate to the data involved — encrypted connections (TLS) between your device, the bot, and our server, and access limits on production systems. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security; we are not a bank or a regulated financial custodian, and this Service never holds funds on your behalf.

09Your rights

Depending on where you live, you may have rights to access, correct, delete or export the personal data we hold about you, and to object to certain processing. To exercise any of these, contact us at the address below — we will respond within a reasonable time, and within any deadline applicable law requires. We may need to verify your Telegram identity before acting on a request, to avoid disclosing your data to someone else.

10Children

The Service is not directed at, and must not be used by, anyone under 18. We do not knowingly collect data from children; if we learn that we have, we will delete it.

11Cookies and analytics

The website uses Yandex Metrika on its Russian-language pages for standard visit analytics (pages viewed, general location, device type) — it is not linked to your Telegram account or check history. The Telegram bot itself does not use cookies; Telegram's own privacy policy governs data Telegram collects as the messaging platform.

12Changes to this policy

We may update this policy from time to time; the “Last updated” date at the top will change accordingly. If a change is material, we will make reasonable efforts to surface it before it takes effect.

13Contact

Privacy requests and questions: hello@amlcheckhub.com