Privacy Policy
Version of October 3, 2026. Effective upon publication.
This Policy describes what data Garant Exchange (the “Service”: the Telegram bot @garant_p2p_exchange_bot, the mini app and the website garantp2p.com) collects, why, who has access to it, how we protect it and what you can do with it. The rules for the deals themselves are set out in the Terms of Service.
1. What Data We Collect
From Telegram
Your Telegram ID, name, @username and interface language, as well as the time of your last visit to the bot or mini app. We do not receive your phone number, contacts or geolocation.
If your Telegram privacy settings show your profile photo to everyone, it is used as your avatar in the mini app and is visible to other users. To hide it, restrict who can see your photo in Telegram settings; within a few days, a letter will be shown again instead of the photo.
What You Provide
- Display name, country and language.
- Bank card numbers, cardholder name and bank, and crypto wallet addresses, as provided in offers, deals and saved payment details.
- Offer terms, reviews and price alerts.
Deal Data
Amounts, rates, statuses and times of deals; messages and photos in the deal chat, including payment receipts; blockchain transaction hashes; balance transactions, withdrawal requests and referral rewards.
Identity Verification
Verification using an identity document and a selfie is carried out by Didit. Documents and photos are processed by Didit under its own privacy policy; they are not transferred to the Service. We receive and store the verification result, the name and country from the document, the session ID, and an indication of whether the same document has already been used for another account.
Technical Data
The mini app stores your settings, such as market sorting and filters, in the browser's storage. The server keeps technical operation logs.
Visit Statistics
The website garantp2p.com and the mini app use the Yandex Metrica analytics service. It uses cookies and receives anonymized visit data: which pages and screens were opened, device and browser type, approximate location based on the IP address, and the referral source. From the mini app, only the screen name and the fact of key actions (for example, “deal opened”) are transmitted, without deal numbers, payment details, amounts or sign-in data. Session recording (Webvisor) is not used. The data is processed by Yandex LLC under its own privacy policy. You can disable data collection by blocking cookies in your browser or by installing the Metrica opt-out add-on.
2. Why We Need This Data
- To carry out deals: show payment details to the other party, accept deposits and send crypto assets.
- To hold users' crypto assets and keep records of them.
- To resolve disputes and protect users from fraud.
- To apply limits, identity verification and blocks.
- To send notifications about deals, prices and offers.
- To comply with lawful demands of government authorities.
- To compile aggregate anonymized statistics on the Service and improve it.
We process data because it is necessary for the performance of the Terms of Service, on the basis of your consent, to protect the legitimate interests of users and the Service against fraud, and to comply with legal requirements.
3. Who Sees Your Data
- Other users see your display name, rating, reviews, deal statistics, level, verification badges, whether you have been online recently, and your active offers.
- The other party to a deal additionally sees the payment details needed for that deal: the seller's card number, cardholder name and bank.
- The guarantor and moderators see the data necessary to carry out deals and resolve disputes, including the deal chat.
- Didit receives the data needed for identity verification.
- Yandex receives anonymized visit statistics.
- Telegram delivers the bot's messages.
- Blockchain: blockchain transactions and addresses are public by nature.
- Government authorities receive data only upon a lawful request and only to the extent necessary.
We do not sell data, do not share it with advertisers and do not show ads. The servers of the Service and of our partners may be located in a country other than yours; data in transit is protected in the same way as data in storage.
4. Storage and Protection
- Data is stored on the Service's server. A database backup is created daily; the last 14 backups are kept.
- Connections to the website and the mini app are protected by HTTPS, and sign-in to the mini app is confirmed by a Telegram signature. You can additionally protect it with a PIN code.
- Only the Service's administration has access to the data, and only to the extent necessary for operation. Moderators see data only for the deals they are reviewing.
- Deal history and related messages are kept for as long as the Service operates: they are needed to resolve disputes, protect against fraud and comply with legal requirements.
- If a data breach affects your data, we will notify you via the bot and explain what measures have been taken.
5. Your Rights
- You can change your name, country and language and delete saved payment details yourself in your profile.
- You can request a copy of your data, its correction or the deletion of your account. We will delete your profile and payment details, except for data on completed and open deals that we are required to keep. Before deletion, withdraw the funds from your balance.
- You can withdraw your consent to optional processing, for example by disabling visit statistics through blocking cookies.
- You can object to processing or file a complaint, either with us via the bot or with the personal data protection authority of your country.
- We respond to data requests within 30 days.
- You can stop using the Service and block the bot at any time.
6. Age
The Service is intended only for persons over 18 years of age. If we learn that an account belongs to a minor, we will block it, return the funds and delete the data that we are not required to keep.
7. Changes to This Policy
A new version is published on this page with its date. We notify users of material changes via the bot.
8. Contacts
For questions about your data and requests for a copy, correction or deletion, contact us via the bot @garant_p2p_exchange_bot.