iMe Shop Privacy Policy

Effective date: 20 October 2026 (edited 9 November 2026)

This Privacy Policy explains how iMe Lab FZCO (“iMe”, “we”, “us”, or “our”) processes personal data when you use iMe Shop, the service for purchasing Telegram Premium and Telegram Stars for yourself or as a gift (the “Service”), including when you interact with the bot @iMe_shop_bot.

By using the Service, you agree to the iMe Shop Terms of Service. This Privacy Policy forms an integral part of the Terms of Service. Defined terms, such as Order, Purchase, Recipient, and Gift, have the meanings given to them in the Terms of Service.

1. Controller

1.1. iMe Lab FZCO, whose details are set out in Section 12, is the controller of the personal data described in this Privacy Policy. We process it in accordance with the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) and, where applicable, other data protection laws, including the EU General Data Protection Regulation (GDPR).

1.2. This Privacy Policy covers the Service only. The iMe applications are covered by the iMe Privacy Policy. Telegram processes your data, including the messages you exchange with the bot, under its own privacy policy (https://telegram.org/privacy).

2. Data we process

2.1. Telegram account data that Telegram provides when you open the Service or write to the bot: your Telegram user ID, username, first and last name, language, whether you have Telegram Premium, and your Telegram profile photo, which we copy to our storage to show it in the Service; and the commands and messages you send to the bot.

2.2. Settings data: your time zone, your notification settings, and the status and end date of your Telegram Premium where we need them for reminders. The Service also stores on your device your interface settings, such as language and theme, and identifiers used for analytics.

2.3. Order and Purchase data: the Digital Item, quantity or period, the Recipient’s @username, price, Payment Method, status, dates, and order ID; for a Gift with automatic renewal, the Telegram user ID of the account that received it; and Subscription data, such as renewal status, Billing Period, and next charge.

2.4. Card payment data received from the Payment Provider: payment status, identifiers, and the reason a payment was declined. Your card number and security code are entered in the Payment Provider’s checkout and are not received or stored by us.

2.5. Cryptocurrency payment data: the asset, network, amount, and transaction hash; the transaction details that are public on the blockchain, including the sending address; and the results of payment screening.

2.6. Information you give us: your messages to support and any information you provide when we ask you to confirm a payment or the origin of funds (Section 13.3 of the Terms of Service).

2.7. Technical and usage data: IP address; the country determined from your IP address or, if you come from an iMe application, the country of your phone number as reported by that application; your user agent; device and application version; error reports, which may include your Telegram user ID; how you use the Service, for example the screens you open, the buttons you tap, and the steps of your purchases; and which of our messages, links, or places in an iMe application led you to the Service or to a Purchase.

2.8. When you choose a Recipient from your Telegram contacts, Telegram shares that user’s Telegram ID and @username with the bot, and we keep only the @username from them. For a Gift with automatic renewal, we separately keep the Telegram user ID of the account that received the Gift (Sections 2.3 and 9.1). When you enter a Recipient’s @username, the Service may show the name Telegram displays for that account so that you can check it; we keep that name only temporarily, for up to 24 hours, and do not store it with your Order. If the iMe application shows your Telegram Stars balance in the Service, the balance is displayed on your device and is not sent to us.

2.9. Data from iMe applications: if you use an iMe application, we also receive information about that use from the application or from iMe: whether you opened the Service from an iMe application and how recently you used it, when you started using iMe applications, the place in the application where you started a Purchase, and, where available, the status and end date of your Telegram Premium. What the iMe applications send is also described in the iMe Privacy Policy.

3. Why we process data and on what legal basis

3.1. We process personal data:

(a) to create and process Orders, take payments and renewals, and deliver Digital Items — performance of the contract;

(b) to send you messages about your Purchases and Subscriptions — performance of the contract;

(c) to send reminders about your Telegram Premium, for example before it ends — our legitimate interest in helping you keep it active;

(d) to send promotions and news — our legitimate interest in informing customers about the Service or, where the law requires it, your consent;

(e) to provide support, handle refunds, and resolve disputes and chargebacks — performance of the contract and our legitimate interests;

(f) to prevent fraud, including by setting limits on Payment Methods, and to comply with anti-money-laundering, sanctions, tax, and accounting requirements — compliance with law and our legitimate interests; and

(g) to keep the Service secure and working, fix errors, decide which Payment Methods are available to you, and understand how the Service is used and which of our messages, links, and places in iMe applications lead to Purchases — our legitimate interests.

You can turn off reminders, promotions, and news at any time in the Service settings (Section 14.2 of the Terms of Service).

3.2. Payment screening under Section 8.7 of the Terms of Service is automated. If a payment is blocked, you can ask support to review the decision through the channels in Section 12. The limits under Section 5.4 of the Terms of Service are also applied automatically.

4. Who we share data with

4.1. We share personal data only as needed for the purposes in Section 3, with:

(a) Payment Providers, currently Tribute (TRBT Limited, Cyprus) for card payments, which process payments, receive the Purchase details we send to them, including a Gift Recipient’s @username, and act as separate controllers, under their own privacy policies, for the data you enter in their checkouts;

(b) Telegram and Fragment, to deliver Digital Items to the Recipient;

(d) providers of hosting, network, content delivery, and analytics services that run the Service for us or help us understand how it is used, for example Google Firebase Analytics, which receives usage data linked to your Telegram user ID;

(e) competent authorities, courts, and professional advisers, where required by law or needed to establish or defend legal claims; and

(f) a successor in the event of a merger, acquisition, or sale of all or part of our business.

4.2. We do not sell personal data.

5. International transfers

5.1. Our providers and the Official Platforms may process data outside your country of residence. Where the law requires, we rely on appropriate safeguards for such transfers, such as standard contractual clauses.

6. Retention

6.1. We keep Purchase, payment, and compliance records for as long as needed to provide the Service, handle refunds and disputes, and meet our legal obligations, including statutory retention periods for accounting and anti-money-laundering records. We keep support communications for as long as needed to resolve the request. After that, we delete or anonymize the data.

7. Security

7.1. We use technical and organizational measures to protect personal data against unauthorized access, loss, or misuse. No method of transmission or storage is completely secure.

8. Your rights

8.1. Subject to applicable law, you may request access to your personal data, its correction or deletion, restriction of its processing, or a copy of it in a portable format; object to processing based on our legitimate interests, and at any time to the use of your data for promotions and news; and withdraw any consent you have given, without affecting processing that took place before.

8.2. To exercise these rights, contact us through the channels in Section 12. If you write to us by email, we may ask you to confirm the request from the Telegram account it concerns. We may refuse or limit a request where the law allows, for example where we must keep data to meet anti-money-laundering or tax requirements.

8.3. You may also lodge a complaint with a data protection supervisory authority, including the authority in your country of residence.

9. Gift Recipients

9.1. When you buy a Gift, you give us the Recipient’s @username. We use it to deliver the Gift, to describe the Purchase to the Payment Provider, and to handle related support. For a Gift with automatic renewal, we also keep the Telegram user ID of the account that received the Gift, so that its renewals are delivered only to that account (Section 9.2 of the Terms of Service). A Recipient may contact us through the channels in Section 12 to exercise the rights in Section 8.

10. Children

10.1. The Service is not intended for persons under 18 (Section 3.1 of the Terms of Service). If we learn that we hold personal data of a person under 18 who used the Service, we will delete it unless we must keep it by law.

11. Changes to this Privacy Policy

11.1. We may update this Privacy Policy. The updated version is published in the Service and applies from its publication. If a change is material, we will also let you know about it, for example in the Service, in a message from the bot, or in the official iMe channels. Where the law requires your consent to a change, we will ask for it.

12. Contact

12.1. For questions about this Privacy Policy or your data, contact us:

iMe Lab FZCO
Building A1, Dubai Digital Park, Dubai Silicon Oasis, Dubai, United Arab Emirates
Service: iMe Shop (@iMe_shop_bot)
Support: Telegram @iMeMessenger (preferred) · support@imem.app