About you: Telegram ID, name, username, language; shop settings, card numbers and holder name (shown at payment), subscription and balance history. A connected Telegram session is stored only encrypted. For payments: amount, method, time, order number, buyer name and Telegram ID (if the shop owner's bot sent them).
To confirm payments, notify owners and buyers, produce receipts and reports, prevent fraud (e.g. detecting a buyer who cheated several shops) and improve the service.
In a connected account only bank bot messages are read. Personal chats, contacts and other chats are not read or stored.
Data is not sold or shared for advertising. A shop owner sees their own shop's payments. Where required by law, data may be disclosed to authorised bodies on request.
Data is stored on the service server; backups are encrypted. After a shop is closed or on your request data is deleted (except records the law requires us to keep).
You can ask to view, correct or delete your data: in the bot, ❓ Help → 🆘 Contact admin. You can end the session any time in Telegram → Settings → Devices.