Effective from 8 October 2026.
Data controller: Utgard LLC, registration number HE 439217, Arch. Makariou III, 155, Office 301, 3027 Limassol, Cyprus (“we”, “us”). This policy explains what data we collect on tvcardsharing.com, in your customer account at billing.tvcardsharing.com, in the Telegram bot @tvcardsharing_bot and when your receiver connects to our servers, why we collect it, on what legal basis and for how long we keep it.
We process data in accordance with the EU General Data Protection Regulation (GDPR) and the data protection law of the Republic of Cyprus.
1. What data we collect
- Account data: login, email address, the password for the site (stored as an irreversible hash), the connection password for your receiver, registration date, the server you selected and notes added to your account.
- Payment data: amounts, dates, payment method, the transaction ID at the payment provider and the history of your balance; for cryptocurrency payments also the payment address, currency and amount. We do not receive or store bank card numbers — they are processed by the payment provider.
- Subscription data: your packages, their periods, pauses and auto-renewal settings.
- Technical data: IP address and browser and device type (user agent) when you use the site, and the logs of your receiver's connections to our servers: IP address, time and number of simultaneous connections.
- Support requests: the text of messages and attachments in the Support section of your account, from the contact form and by email.
- Telegram bot: if you link your account to the bot — your Telegram chat ID and username, the language you selected, your notification settings and the questions you send to the bot.
- Site statistics: pages viewed, device type and approximate location, collected by Google Analytics (see section 7).
We do not collect special categories of data (health, political views, religion and the like) and ask you not to send them in support requests.
2. Why we process data and on what basis
- Performance of the contract (Art. 6(1)(b) GDPR): creating your account, giving access to our servers, accepting payments, support, emails about your subscription and the Telegram notifications you enabled.
- Legitimate interest (Art. 6(1)(f) GDPR): protection against password guessing, sharing of connection data and other abuse, limiting simultaneous connections, diagnosing faults and site statistics.
- Consent (Art. 6(1)(a) GDPR): news and promotional messages — only if you agreed to them. You can withdraw consent at any time in the bot settings or by writing to support.
- Legal obligation (Art. 6(1)(c) GDPR): keeping payment records for accounting and tax purposes.
3. How long we keep data
- Account data — while your account exists and 12 months after it is deleted (to handle payment disputes).
- Payment records — 7 years, as required by accounting laws.
- Technical data, connection logs and logs of the Telegram bot — no longer than 12 months, after which they are deleted or anonymised.
- Support correspondence — 24 months after the last message.
- The link between your account and Telegram — until you unlink the bot in your profile or delete your account.
4. Who receives data
We do not sell personal data and do not pass it on for other companies' advertising. Data is received only by companies whose services are needed to run the Service, and only to the extent necessary:
- payment providers and banks — to accept payments and make refunds;
- an email delivery provider — for emails about your subscription and support requests;
- providers of servers, databases, file storage and protection against attacks — to host the Service;
- Google (Google Analytics) — for site statistics;
- OpenAI — for automatic translation of support messages and for the assistant in the Telegram bot (only the text of the message is sent);
- Telegram — if you use the bot;
- an online chat provider — if you write to the chat shown on some pages of the site.
Some of these companies are located outside the European Economic Area, so data may be processed in other countries. We disclose data to public authorities only upon a lawful and properly issued request.
5. Your rights
You have the right to obtain a copy of your data, to have inaccurate data corrected, to have data erased, to restrict processing, to object to processing based on legitimate interest, to data portability and to withdraw consent.
To exercise a right, write to [email protected] or in the Support section of your account. We reply within 30 days. Some actions are available right away: password reset on the login page, auto-renewal settings in your account, notification settings in the Telegram bot and unlinking the bot in your profile.
If you believe that we violate your rights, you can lodge a complaint with a data protection supervisory authority — in Cyprus this is the Commissioner for Personal Data Protection — or with the authority of your country of residence.
6. Deleting your account
An account is deleted on request to support. After deletion, access to our servers ends; the unused paid period is not transferred or compensated, except as provided in the Refund Policy. Payment records are kept for the period required by law — they cannot be deleted, and we will tell you so in our reply.
7. Cookies and statistics
Essential cookies are needed to sign in to your account, remember the language and protect forms against forged requests — the Service does not work without them.
Google Analytics uses cookies to count visits and see which pages are used. You can refuse statistics with the Google Analytics opt-out browser add-on or with a browser extension that blocks trackers.
There are no advertising cookies of third-party ad networks on the Service. You can manage cookies in your browser settings; if you disable them, signing in to your account may stop working.
8. Security
Connections to the site are protected by TLS. The password for the site is stored as an irreversible hash. The connection password for your receiver is stored in readable form, because our servers need it to authorise your receiver; it is shown in your account and, if you linked it, in the Telegram bot — keep it secret. Staff access to data is limited and granted only when needed.
We never ask for your site password in emails, chats or by phone. If someone asks for it on our behalf, it is fraud.
In the event of a breach that threatens your rights, we will notify the supervisory authority within 72 hours and inform you if the risk is high.
9. Children
The Service is not intended for persons under 18, and we do not knowingly collect their data. If such data has reached us, let us know and we will delete it.
10. Changes to this policy
We may update this policy. Material changes are published here at least 14 days before they take effect, and we inform you by email. The date at the top shows the version in force.
11. Contacts
On data protection matters: Utgard LLC, Arch. Makariou III, 155, Office 301, 3027 Limassol, Cyprus, [email protected]. A separate data protection officer (DPO) has not been appointed — please write to this address on all questions.
Related documents: Terms and Conditions, Refund Policy.
