1. Who we are
eone watches an official online appointment system for free slots and books one in your name when you are first in its queue. It is operated by eone services to be completed: legal form, to be completed: registration number, to be completed: registered address, country ("eone", "we", "us"). We decide how your personal data is used, which makes us its "controller" under data protection law.
- Privacy questions: hello@eone.help
- Everything else: hello@eone.help
- In the bot:
/privacyshows this policy,/supportreaches us.
to be completed: If eone services is established outside the EU: "Our representative in the EU is …". We have not appointed a data protection officer, as none is required for a service of our kind and size to be completed: confirm.
2. What this policy covers
It covers our website at eone.help, our Telegram bot (open in Telegram), and the bookings we make for you. It does not cover:
- Telegram, which runs the bot and the payments under its own privacy policy;
- the booking system and the office, which handle your appointment under their own rules once we have submitted your booking;
- buying Telegram Stars, which happens between you and Telegram (and Apple or Google in their apps).
3. The short version
- We need your name, phone number and email to book appointments in your name. We use them for that and for nothing else, with one emergency exception (section 8).
- They are encrypted on our server. Other people see only a masked version of your name, like "Ol•••a M.", with your bids and your places in the queues.
- We do not sell your data, show ads, profile you or send you marketing.
- You can delete your details at any time with
/deletein the bot. - Our website sets no cookies and does not track you.
Before you give us any details, the bot asks you to confirm that you have read this policy and agree to our Terms of Service.
4. What we collect, why, and on what basis
| What | Where it comes from | Why we need it | Legal basis (GDPR) |
|---|---|---|---|
| Telegram account data: your user id, username and language (kept), and your first and last name (used once, not kept) | Telegram, when you start the bot | To identify you, talk to you in your language, and create your masked display name. Your Telegram first and last name are used only at that moment; they are not stored | Contract, Art. 6(1)(b) |
| Your masked display name, e.g. "Eu•••e H." | Generated once from your Telegram name | Shown next to your bids, publicly | Contract |
| Your full name, phone number and email | You, in the bot; the phone through Telegram's "share contact" button if you use it | To book appointments in your name — the booking system requires all three — and to check them before you bid | Contract |
| Whether you already hold an appointment for the service | You, in the bot | We ask, only to warn you about the one-appointment-per-email rule; we do not store your answer | — |
| Your acceptance of our terms: which version, and when | You, in the bot | To show that you agreed before paying, as Telegram requires | Contract; legal obligation, Art. 6(1)(c) |
| Your bids: windows, amounts, places in the queue, dates, moves, status | Your use of the bot | To run the queues | Contract |
| Payment records: Telegram's payment ids, amounts in Stars, times, refund status | Telegram, when you pay or we refund | To take and refund payments and keep our accounts | Contract; legal obligation |
| Your bookings: date, time, office, appointment number, activation code, and the booking system's reply, which repeats your name and phone | The booking system | To give you your booking, let you cancel it, and sort out problems | Contract |
| The booking-system access identity we use for your booking | Created by us | To hold your appointment and cancel it when you ask | Contract |
| Your settings: daily summary time, language | You, in the bot | To send the daily summary when you want it | Contract |
| Messages you send to our support | You, by email or in the bot | To answer you | Contract, where it concerns your bids; otherwise legitimate interests, Art. 6(1)(f) |
| Technical records: server logs and error reports | Our systems | To keep the service secure and working | Legitimate interests |
| Website visits, counted without cookies | Cloudflare Web Analytics | To see which pages are used | Legitimate interests |
| Records of our own access to your details | Our admin panel | So that every look at your details is justified and traceable | Legitimate interests; legal obligation |
Telegram gives bots no access to your phone number unless you share it, and none to your other chats, your contacts or your location. We will never ask for your Telegram password or login codes.
5. Who receives your data
5.1 The booking system and the office
When a slot is booked for you, we send your name, phone number and email to the official online appointment system, and through it to the public office whose appointments it manages, in the Republic of Moldova to be completed: name the office, or keep the description. Booking in your name is the service you ask us for. They receive your details as independent controllers, under their own rules.
5.2 Telegram
The bot runs on Telegram, and you pay in Telegram Stars. Telegram processes your messages and payments under its own privacy policy. We receive from Telegram only what it gives any bot.
5.3 Our service providers
These providers process data only on our instructions and under data processing terms:
| Provider | What for | Where |
|---|---|---|
| netcup GmbH | our server, where your data is stored, encrypted | Germany |
| Cloudflare, Inc. | hosting the website, protecting our network, forwarding email sent to us, storing encrypted backups, counting website visits without cookies | EU and USA |
| Resend, Inc. | sending email: alerts to ourselves, and the emergency notice in section 8 | USA |
| Functional Software, Inc. (Sentry) to be completed: if used | error reports, set up to leave out personal details | USA |
Our connections to the booking system may pass through network providers that carry them encrypted end to end and cannot read them.
5.4 Nobody else, except
- authorities, when the law obliges us, or to protect someone's rights or safety;
- a company that takes over the service, after we have told you.
We never sell personal data or share it for advertising.
6. Transfers outside the European Economic Area
- Moldova (the booking system and the office): there is no EU adequacy decision for Moldova. We send your details there because it is necessary to perform our contract with you, booking your appointment (GDPR Art. 49(1)(b)).
- United States (Cloudflare, Resend, Sentry): under the EU–US Data Privacy Framework where the provider is certified, otherwise under the European Commission's Standard Contractual Clauses.
- Our server and database are in Germany.
7. What other people can see
Anyone looking at a queue — other users, and visitors to our website — sees your masked display name, your bid amounts and your places in the queues you are in. Nobody sees your name, phone number, email, Telegram username or Telegram id.
8. The one emergency use of your email
If Telegram blocks or bans our bot while you still have money held through it, we may send you one email with a fixed notice telling you where the service continues and what happens to that money. This is the only time we use your email for anything other than your booking. We do it because it may be the only way to reach you about your money (legitimate interests), and as part of our contract with you. It is never used for marketing.
9. How long we keep it
| Data | Kept until |
|---|---|
| Your name, phone number, email, Telegram name and username, masked display name and settings | 12 months after your last bid, or at once when you ask us to delete them |
| Your bookings, including the booking system's reply | 180 days after the appointment date |
| The link between you and the booking-system identity used for your booking | the appointment date has passed |
| Payment and accounting records, which identify your Telegram account but hold no name, phone number or email | as long as accounting law requires: to be completed: N years |
| Support messages | 12 months after the matter is closed |
| Server logs | overwritten within 30 days |
| Backups | encrypted, and kept 30 days, so anything deleted also disappears from them within that time |
| Records of our access to your details | kept, but they record which details were viewed and why, never the details themselves |
10. Automated decisions
The order of every queue, and so who gets a slot, is decided automatically by our published rules: the highest bid first, and among equal bids whoever reached that amount first. That automatic ranking is the service you ask us for (GDPR Art. 22(2)(a)). If you think a decision was wrong, write to us and a person will review it. We do not profile you.
11. Your rights
You can ask us to:
- give you a copy of your data (access);
- correct it — or do it yourself with
/profile; - delete it — or do it yourself with
/delete; - restrict how we use it, or object to uses based on our legitimate interests;
- give you your data in a portable format.
You can also complain to a data protection authority: in the EU, the one where you live or work, or ours, to be completed: authority. We would rather hear from you first.
Write to hello@eone.help, or use the bot. We answer within one month. To make sure the request is really yours, we may ask you to confirm it from the Telegram account the data belongs to.
What deleting your details means in practice
- If you have bids in a queue, we withdraw them first and refund their deposits. The entry fee is not refundable (Terms of Service, section 7).
- If we booked an appointment for you, deleting your details does not cancel it. Cancel it in the bot first if you want to (nothing is refunded). The office's own record of your appointment is theirs, not ours.
- We keep payment records, without your name, phone number or email, as accounting law requires.
- Your chat with the bot is stored by Telegram; you can delete it in Telegram.
12. Security
- Your name, phone number and email, and the booking-system identities, are encrypted in our database. Backups are encrypted.
- Only the operator can see personal details, through an admin panel protected by multi-factor sign-in. Every time someone views them is recorded with the reason, and there is no bulk export except the emergency notice in section 8.
- Our server accepts no incoming connections from the internet, and our website holds only public information.
No system is perfectly secure. If a breach puts your data at risk, we will tell you, and the authorities, as the law requires.
13. Age
You must be at least 18 to use eone. We do not knowingly collect data from anyone younger, and we delete it if we find we have.
14. Cookies and similar technology
Our website sets no cookies. It remembers your choice of light or dark theme in your browser's own storage, and it may keep a copy of public pages so they load faster and work offline. Visits are counted by Cloudflare Web Analytics, which uses no cookies and does not follow you across websites. If that ever changes — for example if we show ads — we will ask for your consent first and update this policy.
15. Changes to this policy
We will publish any change here with a new version number and date, and tell users in the bot. If a change matters to how we use your data, we will ask you to review it before your next bid.
16. Contact
hello@eone.help · hello@eone.help · /support in the bot.
This policy is written in English; if a translation differs, the English version applies.