Privacy Policy
Last updated: June 10, 2026
The short version: we store the minimum, host it in the EU, use one cookie, and sell nothing about you to anyone.
Who we are
PaidJoin (paidjoin.com) is run by a Sweden-based company and helps creators sell paid access to private Telegram channels and groups. Swedish law governs this policy. The fastest way to reach us about anything privacy-related is via Telegram at @PaidJoinBot.
What we collect from creators
If you run a project on PaidJoin, we store your Telegram user ID and name, your project and plan configuration, and the restricted Stripe API key you paste into the dashboard. That key is stored encrypted (AES-256-GCM), and we ask you to create it with minimal permissions. We never see or store card numbers.
What we collect from subscribers
If you join a creator's channel through PaidJoin, we store your Telegram user ID and username, your membership periods and plan, and payment records such as amounts and status. We do not store card data — checkout happens entirely on Stripe, and your card details go to Stripe, not to us.
Why we process this data
We process this data to run the membership service: verifying channel ownership, delivering invite links, tracking who has paid and until when, sending renewal reminders, and removing expired members after the grace period. The legal bases under the GDPR are performance of a contract (providing the service you signed up for) and our legitimate interest in operating it reliably and securely. We do not profile you or use your data for advertising.
Where your data is stored
All data is hosted in the EU, on Hetzner servers in Germany. We do not transfer your personal data outside the EU ourselves; Stripe and Telegram process data under their own policies as independent services you also interact with.
How long we keep it
We keep your data while your creator account or subscriber membership is active. Audit logs and payment records are kept longer where needed for bookkeeping and to resolve disputes. When data is no longer needed for these purposes, we delete it.
Who else sees your data
Three parties are involved in making the service work: Stripe (payment processing — payments go directly to the creator's own Stripe account, we never hold funds), Telegram (the platform the bot and channels run on), and Hetzner (our EU hosting provider). That is the full list. We do not run advertising, we do not sell your data, and we do not share it with anyone else.
Your rights under the GDPR
You have the right to access the data we hold about you, correct it, or have it deleted. You can also object to processing or ask us to restrict it. To exercise any of these rights, message us at @PaidJoinBot and we will handle it. If you are unsatisfied with our response, you can complain to your local data protection authority.
Cookies
We use exactly one cookie: a signed session cookie that keeps you logged in to the dashboard at app.paidjoin.com. There are no tracking cookies, no advertising cookies, and no third-party analytics cookies.
Changes to this policy
If we change this policy, we will update it here with a new date. For meaningful changes — like new data we collect or new processors — we will tell creators through the dashboard. Continued use of PaidJoin after a change means you accept the updated policy.