Privacy policy — Julius service
Last updated: 12 October 2026
This policy covers the Julius service: the shared Telegram bot and the server that passes messages between your Telegram and your WooCommerce store. The Julius eShop Manager plugin runs on your own site. Your customers are covered by your shop’s own privacy policy; as their controller, you should mention the Julius service and the providers named below in it.
Operator (data controller for the data listed below): Wealthy, MB (company code 307058023), Kaštonų g. 1-2, Jonučių II k., LT-53272 Kauno r., Lithuania, hello@5ambers.com.
The short version
Your orders, customers and products stay on your server. Our service does not copy your shop database. It reads from your site only what is needed for an answer or an alert, passes it on and does not store it. The text of your message is erased as soon as it is answered.
What we store, and for how long
| Data | Why | How long |
|---|---|---|
| Your site address, REST API address, admin host, store name, site language, timezone, plugin version | to know which store a message belongs to, to reach your site, and to answer in your language and time | while you are connected. After you disconnect or delete the plugin they are kept without the site key, so that reinstalling does not restart the trial. Write to us to have them deleted |
| Site key (a random secret) | to sign requests between the service and your site | until you disconnect or delete the plugin; then it is destroyed at once |
| Your plan, trial start, and the number of questions and AI tokens used each month | to apply the limits and to bill | kept as billing history for 10 years after the last paid period, as Lithuanian accounting law requires; for a store that never paid, deleted together with the site record on request |
| Stripe customer and subscription IDs, and the date the paid period ends | to give you Pro and to end it when the paid period runs out | kept as billing history for 10 years after the last paid period, as Lithuanian accounting law requires. Stripe keeps the payment data itself |
| Telegram chat ID, first name, username and language of each connected person, and when they were connected | so only the people you connected can use your store, and so the bot answers in their language | until you unlink the chat, disconnect or delete the plugin, or the person blocks the bot |
| IP address of the server that asks to connect a store | rate limits against abuse | about one day |
| A code made from the numbers of an alert that was delivered | so the same alert is not sent twice | used for one hour, deleted within about a day |
| Operational log: time, event, store number, error text | to keep the service running | 30 days. It never contains message texts, store data or secrets |
| Web server access log kept by our hosting provider: IP address, time, requested address | security and troubleshooting | about 30 days |
What passes through but is not kept
- Your message to the bot waits in our queue only until it is answered, then the text is erased. The queue row without the text (chat ID, times, status) is deleted after 2 days.
- Store data needed for an answer (for example the orders you asked about) is fetched from your site over a signed request. It is sent to the AI provider together with your question and the short conversation history, and it is not written to our database. The conversation history is kept on your own site for 2 days, not on our service.
- The alerts you switch on go from your site through our service to your connected Telegram accounts and are not stored. These are new orders and payments, “something broke” alerts, the morning summary, and the cards shown after you press Start.
- Order cards contain customer data: name, company, phone, e-mail, city and country, items and the customer’s note.
- The other alerts contain no customer data. They contain counts, order numbers and totals, and product names. A failed e-mail alert contains the name of the WooCommerce e-mail and the last error text, with e-mail addresses, names, logins and passwords removed.
Who else processes this data
- Telegram (Telegram FZ-LLC) delivers the messages. What you write to the bot and what the bot answers goes through Telegram, under Telegram’s privacy policy. Telegram FZ-LLC is based in Dubai, outside the EEA: messages go there because you chose Telegram as your channel, and where Telegram keeps them is described in its privacy policy.
- Anthropic (Anthropic PBC, USA) is the AI that composes the answer. It receives your question, the conversation history and the store data needed for the answer, which can include customer data from the orders you ask about. Under Anthropic’s commercial terms, API data is not used to train its models. Anthropic is in the USA, so what we send it leaves the EEA. The transfer is covered by Anthropic’s Data Processing Addendum, which is part of its commercial terms and includes the EU Standard Contractual Clauses. Anthropic’s privacy policy.
- Stripe processes the payment when you buy the Pro plan. You enter your card on Stripe’s own page; we never see it. Stripe tells us when a subscription starts, renews or ends, with the customer and subscription IDs. Stripe handles the card and payment data under its own privacy policy.
- Cloudways hosts the service on a DigitalOcean server in Amsterdam, the Netherlands (EU).
In the Julius service there is no advertising, no analytics, no data selling and no profiling. The 5ambers.com website has its own privacy notice.
Legal basis (GDPR)
- Performing our contract with you (Art. 6(1)(b)): running the service you connected.
- Our legitimate interest (Art. 6(1)(f)): keeping the service secure and working (rate limits, error logs, not restarting a trial on reinstall).
- Our and your legitimate interest (Art. 6(1)(f)) for the people you connect who are not you: giving them the access you chose to give them. Please show them this policy before you connect them.
For the personal data inside your shop (your customers), you are the controller and we act as your processor. We pass that data to your Telegram in the alerts you switch on and in answers to your questions. We also send it to the AI provider when it is needed for an answer. We do not store it. The terms of use and this policy are the instructions you give us for that data: we use it only to run the service you connected, keep it confidential, rely only on the providers named above and tell connected stores 30 days before we add or change one, protect it with appropriate technical and organisational measures, tell you without undue delay if it is breached, help you answer your customers’ requests, and give you the information you need to show all this. When you disconnect, nothing of your customers’ data remains with us: it was never stored. If you need a separate data processing agreement, write to hello@5ambers.com.
Your choices
- Switch alerts off: WordPress admin → WooCommerce → Julius → Notifications.
- Unlink one Telegram chat: WordPress admin → WooCommerce → Julius.
- Disconnect: the site key stops working at once and all connected chats are deleted.
- Delete the plugin: the same happens automatically, and the plugin removes its own data from your site.
- Ask us: write to hello@5ambers.com for a copy of what we hold about your store, or to have it deleted, including the site record kept after you disconnect. We answer within 30 days. You, and each person you connected, may also ask us to correct or restrict that data, to receive it in a portable form, and you may object to the processing we base on our legitimate interest.
- Complain: you may lodge a complaint with a data protection authority, for example the State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija), L. Sapiegos g. 17, 10312 Vilnius, Lithuania, ada@ada.lt.
Children
The service is for shop owners and is not intended for anyone under 16.
Changes
If this policy changes, the date above changes. For anything material, the bot tells your connected Telegram chats at least 30 days in advance.
Questions: hello@5ambers.com.