Privacy Policy
This privacy policy explains how Telegram Bot App collects, uses, and protects your data when you use our AI-powered Telegram group moderation service.
Last updated: March 1, 2026
1. Introduction
Telegram Bot App ("we", "us", "our") operates an AI-powered content moderation bot for Telegram groups. This Privacy Policy describes how we collect, use, store, and share information when you interact with our bot, visit our website at telegram-bot.app, or use our API services ("discuse-api").
By using our services, you agree to the collection and use of information in accordance with this policy. If you do not agree with this policy, please do not use our services.
2. Data We Collect
2.1 Information from Telegram
When users interact with our bot or are members of groups where our bot operates, we may receive the following data from the Telegram API:
- Telegram user ID
- Profile display name and username
- Profile picture (analyzed for NSFW content; images are not stored)
- Group membership and administrator status
2.2 Message Content
Our bot processes messages in groups where it is installed:
- Text messages are analyzed in real-time for spam, toxicity, profanity, threats, and insults
- Image and media content is scanned for NSFW material using computer vision
- Files are scanned for viruses and malware
- Message content is not stored permanently. Only violation records (type, reason, confidence score, and timestamp) are retained
2.3 Behavioral Data
- Spam ratings - computed behavioral scores based on user activity patterns
- Violation history - records of moderation actions taken (punishment type, reason, confidence score, timestamp)
- NSFW flag status from profile picture analysis (boolean result only, not the image)
2.4 Group Configuration Data
- Group settings and moderation configuration set by administrators
- Custom thresholds and filter preferences
2.5 API and Website Data
- IP addresses when accessing discuse-api services
- Authentication tokens for session management
2.6 Payment Data
Payment processing is handled by Stripe. We do not store credit card numbers, CVVs, or other sensitive payment details on our servers. We receive and store only transaction identifiers, subscription status, and billing history from Stripe.
3. How We Process Your Data
We use the data we collect to provide and improve our moderation service:
3.1 AI Content Analysis
- Text analysis using AI models for spam detection, toxicity scoring, profanity filtering, threat detection, and insult detection
- Computer vision models scan images and media for NSFW content
- Language detection across 33+ languages to apply appropriate moderation rules
- Antivirus scanning of uploaded files for malware and virus detection
3.2 Behavioral Analysis
- Computation of spam ratings based on historical behavior patterns
- Aggregation of violation data to improve detection accuracy
3.3 Service Operation
- User authentication and authorization via Telegram OAuth
- Enforcing group moderation settings configured by administrators
- Processing payments and managing subscriptions
- Providing the administrative dashboard and API access
4. Data Retention
- Message content: Not stored. Messages are analyzed in real-time and discarded immediately after processing. Only the resulting violation records are kept.
- Images and media: Not stored. Media is scanned in real-time and only confidence scores and NSFW flags are retained.
- Violation records: Retained indefinitely to maintain accurate spam ratings and moderation history. This ensures consistent protection across all groups.
- Account data: Retained for the duration your account is active or the bot is installed in your groups.
- Payment records: Retained as required by applicable tax and financial regulations.
5. Third-Party Services
We share data with the following third-party services as necessary to operate our platform:
- Telegram Bot API: We interact with the Telegram Bot API to receive and process messages, manage group moderation actions, and authenticate users. Telegram's own privacy policy governs their handling of your data.
- Stripe: Payment processing for premium subscriptions. Stripe handles all payment card data. See Stripe's privacy policy for details on their data practices.
- Cloud Infrastructure: Our services run on a self-managed Kubernetes cluster. Data is processed and stored on infrastructure within our control.
We do not sell your personal data to any third party.
6. Data Security
We implement appropriate technical and organizational measures to protect your data, including:
- Encrypted connections (TLS/HTTPS) for all data in transit
- Role-based access control for internal systems
- Regular security updates and monitoring of infrastructure
- Minimal data collection - we only store what is necessary for service operation
While we take reasonable measures to protect your data, no system is completely secure. We cannot guarantee absolute security of your information.
7. Your Rights
Under the General Data Protection Regulation (GDPR) and other applicable privacy laws, you have the following rights:
- Right of access: You may request a copy of the personal data we hold about you.
- Right to rectification: You may request correction of inaccurate personal data.
- Right to erasure: You may request deletion of your personal data, including violation history and spam ratings.
- Right to data portability: You may request an export of your data in a structured, machine-readable format.
- Right to object: You may object to the processing of your personal data for certain purposes.
- Right to restrict processing: You may request that we limit how we use your data.
To exercise any of these rights, please contact us at support@telegram-bot.app. We will respond to your request within 30 days.
Data is processed on EU-based infrastructure.
8. Automated Decision-Making
Our service relies on automated AI systems to make moderation decisions in real-time. These decisions include muting, warning, or banning users based on content analysis confidence scores.
Automated decisions are subject to thresholds configured by group administrators. False positives are possible, and group administrators can review and override any automated moderation action through their dashboard.
If you believe an automated decision was made in error, you can contact the group administrator or reach out to our support team.
9. Children's Privacy
Our services are not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
10. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify users through our website or bot. Continued use of our services after changes are posted constitutes your acceptance of the updated policy.
11. Contact Us
If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us:
- Email: support@telegram-bot.app
- Telegram: @tgBotApp support group