Skip to content
CheckIM
Log in
Privacy policyTerms of serviceRefunds and after-salesCookies

Privacy policy

Last updated

This policy explains how PWD Digital Agency Pty Ltd ("we") handles your personal information when operating the CheckIM website, app, Telegram bot and API (the "Service").

What we collect

  • Account details: your email address and password when you sign up by email (we store only a password hash); your Telegram account ID when you sign up or link with Telegram; contact details recorded when support opens an account for you.
  • Usage records: login times and login IP addresses, the egress IPs your API keys are limited to, and your orders, top-ups, balance and after-sales records.
  • Data you upload: number files and the result files produced from them.
  • Technical logs: request details kept for security and troubleshooting, such as time, IP address, the address requested and the outcome.
  • Payment details: the amounts and on-chain transfer records of USDT top-ups. We do not collect card details.

How we use it

Numbers you upload are processed only as your orders instruct. Without your permission we do not use them for any other purpose, except where required by law, lawfully requested by regulators or necessary to protect the security of the system and data.

  • To provide the Service: creating and signing in to accounts, running orders, billing and settlement, top-ups and after-sales.
  • To send service messages such as sign-up codes. We do not currently send marketing email.
  • To keep the Service secure: preventing automated sign-ups and abuse, troubleshooting and meeting legal obligations.

Service providers

We use the following providers to run the Service. They process only the data needed for that purpose:

  • Google Cloud: servers and storage, in the Singapore region.
  • Cloudflare: network delivery and protection, and the human check on the sign-up page (Turnstile).
  • Mailgun: sending sign-up code emails.
  • Telegram: messages and files travel through Telegram when you use the bot.

We do not sell personal information

Apart from the providers above, your permission and legal requirements, we do not share your personal information with third parties.

How long we keep it

  • Number and result files of completed orders are deleted after 180 days by default. Uploads never used for an order are deleted after 24 hours.
  • Account, order and financial records are kept while your account exists, and after closure for as long as law and accounting require.
  • Technical logs are kept for a limited time for security and troubleshooting.

Security

  • The whole Service uses HTTPS.
  • Passwords are stored only as hashes.
  • Login session cookies are sent only over HTTPS and cannot be read by page scripts.
  • API keys can be limited to egress IPs, and back-office access is permission controlled.

International processing

Service data is stored in Singapore. Our providers may process data in other countries or regions; we choose only providers that offer appropriate safeguards.

Your rights

You can contact us to access, correct or delete your personal information, or to close your account. We act on requests after verifying your identity. Records we must keep by law or for accounting are deleted when that period ends.

Changes

We publish updates on this page and change the date above. If a change affects you significantly, we will also tell you directly.

Contact

Questions about this policy or your information: please contact us.