Privacy policy

This policy describes what the Tayra service keeps about you and your devices, why and for how long. The legal entity responsible for your data, its country and address are published on the About us page. Questions about your data — to support, contacts are on the same page.

Your connections

We keep only minimal diagnostic data: device, account, connection IP address, server, DNS queries and time — up to 3 months. By default it is not collected; collection is turned on when the law requires it or at your request to investigate a connection problem.

Today this collection is not built yet, and no connection log is kept at all. When it is built, it works like this:

• When it is on. For all users — only when the law of the country of our legal entity or of our users, or an official request, requires it; the decision is made together with a lawyer, and the reason is recorded. For your account only — when you turn on the Connection diagnostics setting yourself, usually at the request of support to investigate a problem. Both are off by default; while collection is on for you, your account shows it.
• What is recorded: date and time (UTC) of the start and end of a connection and of DNS queries; the account number and its email or Telegram; the device number and name; the IP address the device connected from; the server; the names the device asked in DNS queries.
• What is not recorded: addresses and ports the device connected to, page addresses and content, traffic volume, DNS answers, data of apps and of the device. If the device uses encrypted DNS of another provider (for example, DNS over HTTPS in a browser), its queries are not visible to us.
• How long and where: up to 90 days, then deleted; backups, if any, no longer. A separate storage with an encrypted disk; access only for an administrator with a separate right, and every view and export is recorded in the audit log.

What the service keeps to work

• Account: email or Telegram ID and @username, language, who invited you, how the account was created, and two-step verification if you turn it on. From Telegram we do not keep your name, phone number or photo.
• Devices: name, type, keys, the time of the last traffic and the last activity and the server it went through — only the last values, without history.
• Sign-ins: IP address, sign-in method and browser — while the session is valid (30 days in the account and app, 24 hours in the Telegram Mini App); deleted within an hour after it ends. Failed sign-in attempts — address, reason and the entered email — for one day, to protect against guessing.
• Telegram linking: link codes are kept only as a hash; failed attempts as a keyed hash of the Telegram ID, without the ID itself; both are deleted a day after they expire.
• Free trial: a hash of the email address and a keyed hash of the Telegram ID — without end date, also after the account is deleted, so that the trial cannot be taken again; the visitor’s network (IPv4 address or IPv6 /64 and /48) — one day, for the limit of trials from one network.
• Notifications: which reminder or message was sent, about which term or payment, and whether it was delivered — 90 days.
• Payments and balance: amounts, plans, refunds, the version of these terms at the time of payment and the order number of the payment provider. You enter card details on the page of PayPro Global; the service does not get them.
• Traffic of each device by day — for accounting and plan limits, and the number of connection drops by day — only counters, without addresses and sites.
• Server addresses given to a subscription: which entry addresses of our servers a subscription received and when (to the hour) — 180 days after the last time, to find how a blocked address leaked. Client addresses and sites are not there.
• Service logs: logs of the account and bot services — up to 5 files of 50 MB each, until the service is re-created during an update. They may contain an email address and a network in lines about sign-in limits and blocks, and an account number in lines about errors and administrator actions. Site addresses and connection logs are not there. On our VPN servers the system log (up to 300 MB) has failures and warnings without client addresses; a connection error may name a site, without the device and its address.

Approximate location

When your app updates the subscription, our panel gets from Cloudflare the approximate coordinates and country of your IP address and uses them only during this request to put the nearest place first. The location is not stored and not written to logs — neither the place, nor the IP address, nor the subscription. The only exception is a country code outside ISO 3166-1 (a data error, not your location): it is written to the log once, without IP address, user and subscription. You can turn this off with the Nearest place first setting of the device.

This website

The website has no third-party scripts, fonts or cookies and no JavaScript analytics: we see only aggregate statistics of the Cloudflare zone. Your choice of theme and language is kept in the browser storage of your device and is not sent to us. When we add a campaign code to sign-up and payment (?ref=, utm_source), the account will keep only the short code of the channel, without the address and history of visits.

Who processes data for us

• PayPro Global sells the service to you and processes payments.
• Cloudflare delivers the traffic of the website and of the account.
• Telegram, if you use our bot or sign in with Telegram.
• The email service that sends sign-in codes and notifications.
• Hosting providers of our servers and the storage of backups.

Your rights

You can get a copy of your data (a JSON file without keys and tokens) and delete your account. For now, through support — see Account deletion; later — in your account and in the bot.

Changes

Each new version of this policy is published on this page with its version and date.