Privacy Policy

Tfa3ol ("تفاعل", "we", "our", or "us") operates a subscription-based Telegram engagement automation platform designed for Forex, Crypto, and financial trading channels across GCC, MENA, and global markets.

This Privacy Policy explains what information we collect when you visit our website, use our subscription calculator, submit a consultation or quote request, or sign in to the Tfa3ol Client Account Portal powered by Frappe.

We collect only the information necessary to provide tailored subscription quotes, provision your account, and deliver automated engagement to your connected Telegram channels:

• Lead & Consultation Data: Your name, Telegram handle (@username) or phone number, Telegram channel URL, and optional notes regarding your channel niche and target monthly quota.
• Account Portal Data: Your full name, email address, encrypted password, phone number, Telegram handle, and primary channel URL stored in our Frappe backend.
• Channel Configuration & Delivery Logs: Public or authorized channel identifiers, post timestamps, configured reaction sets, AI prompt instructions, and monthly quota consumption metrics.
• Technical & Security Data: IP address (used strictly for anti-spam rate limiting), browser language/theme preferences, and session identifiers.

Your data is processed strictly for operational and service-delivery purposes:

• Responding to your quote and consultation requests via Telegram or email within our stated service windows.
• Synchronizing and delivering guaranteed monthly quotas of views, reactions, AI comments, and AI community messages to your designated Telegram channels.
• Calibrating AI language models (Arabic, Khaleeji dialect, and English) to match your channel's trading niche and moderation guidelines.
• Authenticating your session and maintaining your profile within the Frappe-powered client portal.
• Preventing automated abuse, spam submissions, and unauthorized login attempts through rate-limiting controls.

Tfa3ol is built to automate engagement without compromising your channel ownership or personal Telegram account security.

We never ask for your personal Telegram account password or two-factor authentication codes. Our synchronization pipelines monitor only the public or explicitly linked channel posts required to trigger your configured views, reactions, and AI comment workflows.

We use essential HTTP-only cookies and browser storage to operate the platform securely and remember your display preferences:

• Session Cookies (tfa3ol_frappe_sid, tfa3ol_frappe_user): Used to keep you authenticated when signed in to your Tfa3ol account.
• Interface Preferences (tfa3ol-theme): Stored in local storage to remember your selected visual theme (Reference or Tfa3ol Green) and language selection.
• No Third-Party Ad Trackers: We do not sell your browsing behavior to third-party advertising networks.

We do not sell, rent, or trade your personal contact information or channel list to third parties.

Information is shared only with trusted infrastructure components required to run Tfa3ol, including our Frappe ERP/CRM instance for lead and account management, secure cloud hosting providers, and AI inference pipelines used to generate contextual comments for your posts.

We implement industry-standard encryption in transit (HTTPS/TLS), strict API key authentication between our Next.js frontend and Frappe backend, and IP-based rate limiting on all authentication and lead submission endpoints.

Lead records and account data are retained for the duration of your active subscription or business relationship with Tfa3ol, and are deleted or anonymized upon verifiable request unless retention is required for billing or legal compliance.

Regardless of your location, you have the right to:

• Request access to a copy of the personal and account data we hold about you.
• Update or correct your profile details directly inside the Account Portal or by contacting support.
• Request deletion of your lead submission or closure of your Tfa3ol account.
• Withdraw consent for direct Telegram or email follow-ups at any time.