QVOR is built on the principle that your data belongs to you. This policy explains what we collect and why.
We store your phone number hash (not the number itself), encrypted key blobs, and message ciphertext. We never store plaintext messages, passwords, or private keys.
All messages are encrypted on your device before being sent. The server only stores ciphertext and IVs. We cannot read your messages — mathematically.
We use Telegram only to deliver OTP codes and for optional login via the Telegram widget. We do not store your Telegram messages or access your Telegram account.
Your data is stored as long as your account exists. You can delete your account at any time, which permanently removes all associated data.
We use Upstash Redis for rate limiting (no personal data stored) and a PostgreSQL database hosted on our own server. We do not sell or share your data with third parties.
Questions about this policy? Contact us at privacy@qvor.ru