1. Who operates Defter
Defter is based in the Sultanate of Oman and is responsible for the personal data described in this policy. Privacy questions and requests may be sent to admin@defterassist.com.
Defter · English
Privacy Policy
This policy explains how Defter collects, uses, stores and protects personal data.
2. Information we collect
Depending on how you use Defter, we process your Telegram user and chat identifiers, Telegram profile details made available to the bot, messages and commands, voice transcriptions, bookkeeping entries, contact names, balances, reminders, uploaded documents, generated reports, support correspondence, credit usage, transaction references and technical or security logs. If payments are enabled, the payment provider processes payment details; Defter should retain only the payment references and records needed for accounting, support, fraud prevention and legal compliance—not full card details.
3. How we use information
We use this information to provide Defter, understand requested actions, create and retrieve records, generate reports, send reminders, calculate credit usage, process and reconcile purchases, answer support requests, maintain security, prevent abuse and fraud, diagnose failures, comply with legal obligations and improve the reliability of the service.
4. Voice messages and AI processing
Telegram provides the requested voice file to Defter, which sends the audio to OpenAI for transcription. Defter processes the original audio in memory and does not intentionally save it as a permanent local file; the resulting transcription and related message record may be stored with your account. Telegram and OpenAI may process or retain data under their own terms and configured retention controls. Text or transcribed requests may also be sent to OpenAI when AI interpretation is required.
5. Consent and other legal grounds
Where required by Oman law, we ask for clear consent before processing personal data, transferring it outside Oman or sending marketing communications. Depending on the activity, processing may also be necessary to provide the service you request, comply with law, resolve disputes or protect Defter and its users. You may withdraw consent prospectively, but this does not invalidate earlier lawful processing or information we must retain by law.
6. Service providers and international transfers
Defter relies on Telegram for messaging, OpenAI for supported AI and voice processing, cloud infrastructure and monitoring providers for operations, and Tap Payments for payments. These providers may process data outside Oman. We apply appropriate safeguards where required and do not sell personal data.
7. Storage and retention
Records are kept while your account is active and for the periods reasonably needed to provide the service, maintain backups, resolve disputes and meet tax, accounting or other legal obligations. When retention is no longer required, information will be deleted or anonymised where reasonably possible.
8. Security
We use reasonable technical and organisational measures, including access controls, encryption in transit, private service networking, backups and operational monitoring. No online service can guarantee absolute security. Where required, qualifying personal-data breaches will be reported to the competent Oman authority and affected users within the applicable period.
9. Your rights
Subject to Oman law, you may request access to your personal data, a copy of it, correction, updating, transfer or deletion; object to or restrict certain processing; and withdraw consent where consent is the legal basis. Send requests to admin@defterassist.com. We may need to verify your identity and may retain information where the law requires it.
10. Marketing communications
Defter will request separate consent before sending advertising or marketing communications. You may opt out at any time, free of charge, using the method in the message or by contacting admin@defterassist.com. Service messages such as transaction confirmations, security notices and requested reminders are not marketing.
11. Children
Defter is not designed for children and must not knowingly process a child’s personal data without the permissions and safeguards required by Oman law. If you believe a child has provided personal data, contact us so we can investigate and take appropriate action.
12. Changes to this policy
We may update this policy when the service, providers or legal requirements change. The current version and its effective date will be published here. We will provide additional notice or request renewed consent where required.
13. Contact and complaints
Privacy requests and questions may be sent to admin@defterassist.com. You may also submit a complaint to the competent personal-data authority in the Sultanate of Oman in accordance with its published procedure.