11.08.2026 M8 tel LLC, a company registered in Georgia under Identification Number (IN) 400449074, with its registered address at 2g Kakabadze Street, Tbilisi, Georgia, operating the web service at https://m8.tel under the trade name m8.tel ("M8", "we", "us", or "our"), is the data controller responsible for your personal data under Regulation (EU) 2016/679 (the "General Data Protection Regulation" or "GDPR") in respect of visitors and users located in the European Economic Area ("EEA") and the United Kingdom. Under an agreement with the developer and rights holder of the M8 platform, this localised (English-language) version of the Service is operated by M8 tel LLC. This Privacy Policy explains what personal data we collect, why we collect it, the legal bases we rely on, how long we keep it, who we share it with, and what rights you have in relation to it. By sending the /start command to the m8tel_bot in the Telegram application, or by otherwise using or visiting this website, our service, product, software, tool, and/or data channel (together, the "Service"), you acknowledge that you have read and understood this Privacy Policy. If you have any questions or concerns about this Privacy Policy or our data practices that are not addressed here, please contact us at support@m8.tel or see Section 12 ("How to Contact Us and Exercise Your Rights") below. 1. Scope and Controller Information This Policy applies to personal data of individuals located in the EEA and the UK who visit or use the Service. Where required by applicable data protection law, references to "personal data" in this Policy have the meaning given in Article 4(1) GDPR: any information relating to an identified or identifiable natural person. M8 is established outside the EEA and the UK. Where required under Article 27 GDPR, M8 will appoint an EU representative and/or a UK representative to act as a point of contact for data protection authorities and data subjects; details of any such representative will be published here and kept up to date. Until such a representative is appointed, please direct any GDPR-related enquiries to support@m8.tel. M8 has not appointed a statutory Data Protection Officer, as this is not currently required by Article 37 GDPR given the nature, scope and purposes of our processing activities. All privacy-related enquiries should be directed to support@m8.tel. 2. What Personal Data We Collect 2.1. Personal Data You Provide We may collect personal data that you provide to us directly and voluntarily, for example when you sign up for our newsletter or chat, create an account, request information via our "Contact Us" page, respond to a survey or questionnaire, or otherwise submit personal information such as your email address, name, phone number, or other details. In certain cases, and where required by local law, personal data may include passport details. This Policy does not apply to the privacy practices of third parties that we do not own or control, including third-party websites, services, applications, or online resources that this website may link to or reference ("Third-Party Services") and that you may access through the Service. For example, the Service uses the Telegram API as a Third-Party Service, and by using Telegram content and functionality through the Service you agree to comply with Telegram's Terms of Service, Privacy Policy, and Platform Policy. We are not responsible for the content or privacy practices of any Third-Party Service, and we encourage you to review the privacy policy of any Third-Party Service you access. M8 does not treat information that has been anonymised, such that no third party can identify a specific individual from it, as personal data. We collect and use your personal data to provide, operate and improve the Service, provide customer support, carry out research and analysis to improve our products, services and technology, and, where you have consented, to display content tailored to your interests and preferences. You are always free to decline to provide personal data, although certain parts of the Service may then be unavailable to you. Where we rely on your consent as the legal basis for processing, you may withdraw that consent at any time, free of charge, with effect for the future (see Section 8 below). 2.2. Special Categories of Personal Data We ask that you do not send or disclose to us any special category personal data (for example, data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, health data, biometric or genetic data, or data concerning criminal convictions or trade union membership) through or in connection with the Service, except where you choose to do so voluntarily. If you do send or disclose any special category personal data by submitting content to the Service, you consent, in accordance with Article 9(2)(a) GDPR, to our processing and use of such data as described in this Policy. If you do not agree to this, please do not submit such content. Please note that even where such information is provided to us, we do not retain it. 2.3. Anonymised and Aggregated Data We may collect and record anonymised data, meaning data that does not, on its own or in combination with other information reasonably available to a third party, identify you. This may include information such as the website that referred you to us, your IP address, browser type, language, device type, general location, and the time and duration of access. We may also collect navigational data, including information about the content or pages of the Service you view, the links you click, and other actions taken in relation to the Service. Where such data is rendered anonymous, GDPR does not apply to it; where it remains capable of identifying you (for example, an IP address in combination with other data), we treat it as personal data and process it in accordance with this Policy. 2.4. Cookies, Pixel Tags and Local Storage We may collect information using cookies, which are small data files placed on the hard drive of your computer or mobile device. We may use both session cookies (which expire once you close your browser) and persistent cookies (which remain on your device until you delete them) to make your interaction with the Service more personalised and interactive. We use two broad categories of cookies: (1) first-party cookies, which we set on your device and use only to recognise your device when you revisit a website or application that is part of the Service; and (2) third-party service-provider cookies, which are set by service providers we work with, including analytics providers, and which those providers may use to recognise your device when you visit the Service. Details of the specific analytics and advertising cookies we use are set out in Section 4 below. 3. Legal Bases and Purposes of Processing Where GDPR applies, we only process your personal data where we have a valid legal basis under Article 6(1) GDPR. Depending on the purpose, we rely on the following legal bases: Performance of a contract (Art. 6(1)(b) GDPR): to create and manage your account, provide the Service you request, process payments, and communicate with you about your account. Consent (Art. 6(1)(a) GDPR): to place non-essential cookies (including analytics and advertising cookies described in Section 4), to send you marketing communications, and to process any special category data you voluntarily submit. You may withdraw consent at any time, as described in Section 8. Legitimate interests (Art. 6(1)(f) GDPR): to secure and improve the Service, prevent fraud and abuse, respond to your enquiries, and carry out research and analytics on an aggregated basis. Where we rely on legitimate interests, we have balanced our interests against your rights and freedoms and concluded that our interests do not override them; you have the right to object, as described in Section 8. Legal obligation (Art. 6(1)(c) GDPR): to comply with applicable law, respond to lawful requests from public authorities, enforce our terms, and protect the rights, privacy, safety or property of M8, our users, or third parties. 4. Cookies We Use 4.1. Types of Cookies The Service uses the following types of cookies, for the purposes set out below. Strictly necessary cookies: these cookies are required to provide you with services available through the Service and to use certain of its features. They enable you to log in to secure areas and help load the content of pages you request quickly. Without these cookies, we could not provide the services you request, and we use them only for that purpose. These cookies are placed on the basis of our legitimate interest in operating the Service, and do not require your consent. Functional cookies: these cookies allow the Service to remember choices you make, such as your language preference, login details, and other settings. Their purpose is to give you an enhanced experience and save you from re-entering preferences each time you use the Service. Where these cookies are not strictly necessary, we place them only with your consent. Analytics (performance) cookies: these cookies collect information about traffic on the Service and about how users use it. The information collected does not identify a specific visitor; it is aggregated and anonymous, and includes the number of visitors, referral sources, pages visited, time of visit, and similar information. We use this information to operate the Service more effectively, compile general demographic information, and monitor activity levels. For this purpose we use Yandex.Metrica, an analytics service provided by Yandex LLC (Russian Federation). Yandex.Metrica sets its own cookies, and the data collected is processed on servers located in the Russian Federation. Because the Russian Federation has not been recognised by the European Commission as ensuring an adequate level of data protection, transfers of personal data to Yandex LLC are made on the basis of appropriate safeguards, in particular Standard Contractual Clauses approved by the European Commission (or an equivalent mechanism), and are limited to what is necessary for analytics purposes. You may request a copy of the relevant safeguards by contacting support@m8.tel. Further information about how Yandex.Metrica processes data is available in the Yandex Privacy Policy and in the Yandex.Metrica overview. We place analytics cookies only where you have given your consent through our cookie banner. If you do not want Yandex.Metrica to collect data about you when using the Service, you may withhold or withdraw consent via the cookie banner, or install the Yandex.Metrica opt-out add-on, available for major browsers. Targeting (advertising) cookies: these cookies are used to serve advertising that is more relevant to you and your interests, to limit the number of times you see an advertisement, and to help measure the effectiveness of advertising campaigns. They are placed only with your consent, and remember your visit to the Service, sharing that information with other organisations, such as advertisers. 4.2. Advertising and Retargeting Advertising and retargeting for our marketing campaigns are served through Yandex.Direct, an advertising service provided by Yandex LLC. As with Yandex.Metrica (Section 4.1), any resulting transfer of data to the Russian Federation is made subject to appropriate safeguards, including Standard Contractual Clauses. You can manage or withdraw your consent to interest-based advertising via our cookie banner, or through the settings described on the Yandex advertising support page. 4.3. Telegram User Data In this context, we also use Telegram communication tools, namely the messenger's custom audience feature and Telegram user identifiers. For further information on the purpose and scope of the data collected, as well as its further processing and use, please refer to Telegram's Privacy Policy. 4.4. Pixel Tags We may use pixel tags (also known as web beacons) within the Service to track user actions on our websites and applications. Unlike cookies, which are stored on your device, pixel tags are embedded in web pages and are not visible. Pixel tags help us measure the success of our marketing campaigns and compile statistics about Service usage. Information we collect through pixel tags is not linked to identified personal data of our users. 4.5. "Do Not Track" Signals Some browsers can be configured to send "Do Not Track" signals to the online services you visit. We currently do not respond to such signals; instead, we rely on the cookie consent mechanism described in this Section 4 to obtain your choices regarding non-essential cookies. 5. International Data Transfers Some of the recipients described in this Policy, including Yandex LLC (Section 4.1–4.2), are located in the Russian Federation, a country that has not been the subject of an adequacy decision by the European Commission under Article 45 GDPR. Where we transfer personal data to such recipients, we do so on the basis of appropriate safeguards recognised under Chapter V GDPR, in particular Standard Contractual Clauses approved by the European Commission, supplemented where necessary by additional technical and organisational measures. You may request further information about these safeguards, or a copy of the relevant contractual clauses, by contacting support@m8.tel. 6. How We Use the Information We Collect Except as set out in this Policy, M8 does not share your personal data with unrelated third parties. M8 uses personal data you provide directly to us only for the purpose for which you provided it, which may include: operating, maintaining and improving the Service; managing your account, including communicating with you about it; administering any promotions you participate in; responding to your comments and questions and providing customer service; sending you technical notices, updates, security alerts, and support and administrative messages; with your consent, sending you promotional communications about products and services offered by us and our affiliates; processing your payments; and as we believe necessary or appropriate (a) to comply with applicable law, (b) to comply with legal process and governmental requests, (c) to enforce this Policy, and (d) to protect our rights, privacy, safety or property, and/or that of you or third parties. We retain information about your marketing preferences for a reasonable period from the date you last expressed interest in our content, products or services. We retain information obtained from cookies and other tracking technologies for a reasonable period from the date such information was created, and in any event no longer than necessary for the purposes described in this Policy, consistent with Section 7 below. We may share this information with service providers who perform services on our behalf, as listed above, or who provide other services such as processing information requests, displaying data you have access to, assisting with marketing, or conducting audits. Such companies are given access only to the personal data they need to provide the relevant service, are required to maintain its confidentiality, and are prohibited from using it for any other purpose. We use the Telegram messenger and an email service provider as platforms for marketing automation. By submitting information to us, you understand that it may be sent to these service providers for processing in accordance with their respective privacy policies. Where any such provider is located outside the EEA/UK, the safeguards described in Section 5 apply. 7. Data Retention We retain your personal data for as long as necessary to provide you with the Service, unless a longer retention period is required or permitted by law (for example, for regulatory, tax or accounting purposes). Cookie and tracking data is retained for the periods indicated by the relevant cookie or, where no specific period is indicated, for no longer than 26 months. When personal data is no longer required for the purposes described in this Policy, we delete it or render it anonymous. 8. Your Rights Under the GDPR If you are located in the EEA or the UK, you have the following rights in relation to your personal data, subject to the conditions and exceptions set out in applicable law: Right of access (Art. 15 GDPR): to obtain confirmation as to whether we process your personal data, and to obtain a copy of it together with related information. Right to rectification (Art. 16 GDPR): to have inaccurate personal data corrected, and incomplete data completed. Right to erasure (Art. 17 GDPR): to request deletion of your personal data in certain circumstances, for example where it is no longer necessary for the purposes for which it was collected. Right to restriction of processing (Art. 18 GDPR): to request that we limit the way we use your personal data in certain circumstances. Right to data portability (Art. 20 GDPR): to receive personal data you have provided to us, in a structured, commonly used and machine-readable format, and to have it transmitted to another controller, where technically feasible. Right to object (Art. 21 GDPR): to object, on grounds relating to your particular situation, to processing based on our legitimate interests, and to object at any time, free of charge, to processing for direct marketing purposes. Right to withdraw consent (Art. 7(3) GDPR): where processing is based on your consent, to withdraw it at any time, without affecting the lawfulness of processing before withdrawal. Rights related to automated decision-making (Art. 22 GDPR): M8 does not use your personal data for automated decision-making, including profiling, that produces legal effects concerning you or similarly significantly affects you. Right to lodge a complaint (Art. 77 GDPR): to lodge a complaint with the data protection supervisory authority in your EEA/UK member state of habitual residence, place of work, or the place of the alleged infringement, if you consider that our processing of your personal data infringes applicable data protection law. To exercise any of these rights, please contact us using the details in Section 12 below. We will respond to your request within one month, as required by Article 12(3) GDPR (this period may be extended by two further months where necessary, taking into account the complexity and number of requests). 9. Disclosure of Information As a general rule, M8 does not disclose your personal data, except where: we have your permission, including permission obtained upon acceptance of this Policy; we determine in good faith that disclosure is required by law, statute, court order, subpoena, or other legal process, including in response to lawful requests by public authorities; we determine that disclosure is necessary to correct information we believe to be false or misleading, or to address conduct we believe to be manipulative, deceptive, or otherwise unlawful; or such disclosure occurs in connection with a sale, merger, transfer of ownership, exchange, or other reorganisation of all or part of the M8 business, subject to confidentiality obligations. Aggregated, anonymised data collected by M8 may be shared with advertisers and other partners only in aggregated form. 10. Children Our Terms of Use provide that users must be (i) 18 years of age or older, or (ii) at least 13 years of age, provided that (a) they have legal capacity as a minor, or (b) they have the verified consent of a parent or guardian. M8 does not knowingly collect personal data from children under 13. If we become aware that we have collected personal data from a child under 13, we will take steps to locate and delete such information from our records. 11. Security We follow generally accepted industry standards to protect your personal information. No method of transmission over the internet or method of electronic storage is completely secure. While we make reasonable efforts to apply physical, electronic and procedural safeguards to protect the confidentiality of information we collect online, we cannot guarantee its absolute security. We use SSL to encrypt information in transit, and store information on secure servers protected by firewalls, role-based access controls, and passwords. You are responsible for keeping your password confidential. If you believe your interaction with us is no longer secure, please notify us immediately at support@m8.tel. 12. How to Contact Us and Exercise Your Rights If you have any questions or concerns about this Privacy Policy, wish to exercise any of the rights described in Section 8, or would like us to delete personal data you have provided, please contact M8 at support@m8.tel or via the m8tel_bot on Telegram. 13. Changes to This Privacy Policy We reserve the right to amend this Privacy Policy at any time. Whenever we make changes, we will update the "Last updated" date at the top of this Policy. If changes are material, or affect how we use your personal data, we will notify you by posting a notice on our homepage or by sending you an email. We encourage you to review this Policy each time you visit one of our websites or applications. © 2026 All rights to the M8 trademark and platform are protected. Terms, offer availability and package pricing may vary depending on the applicable currency and country of use. Under an agreement with the developer and rights holder, this localised version of the M8 service is operated by M8 tel LLC, Identification Number (IN) 400449074, 2g Kakabadze Street, Tbilisi, Georgia.