Privacy Policy

This policy explains how personal data is handled when you use Telegramte at telegramte.com (the "Service"). The Service is provided by [Legal name], [Address], [Tax / registration number] ("Telegramte", "we", "us"). For any question or request, email [email protected].

See also our Terms of Service and Refund Policy.

Who is responsible for what

Telegramte plays two different roles:

For your own account data (name, email, payment records, login records and similar), Telegramte is the data controller.
For the personal data of the people you talk to through your connected Telegram accounts (your customers, contacts, group members), you are the controller and Telegramte acts as a processor: we handle that data only on your instructions and only to provide the Service.

What data we process

Account data. Your name, email address, a one-way hash of your panel password (scrypt), language preference, login times, and your IP address for security and rate limiting. If you enable two-factor authentication (TOTP), the verification secret.

Workspace and team data. Workspace name, team members, roles and per-number permissions, plan details, and an audit log of who did what and when.

Data from connected Telegram accounts.

The Telegram session, created via QR code, phone code, or a session file you upload (.session, .json or string session), stored encrypted with AES-256-GCM. If you connect by phone code, your Telegram two-step verification password is not stored.
Your chat list and your contacts' names, usernames and phone numbers as they are visible in Telegram.
Message content shown in the inbox, and media you open or upload.
CRM data your team enters: stages, labels, notes, reminders, custom fields and tickets.
Group and channel posts, bulk message campaigns, the opt-out list and delivery results.
Bot tokens, proxy details and webhook settings; tokens and proxy credentials are stored encrypted.

Payment records. Plan, amount, currency, crypto network and coin, transaction hash and payment status. We never receive or store card data.

Support messages. What you send us and any attachments.

Technical logs. Server and error logs, request times and IP addresses.

Why we process it

To provide the Service: create your account, connect Telegram accounts, display and send messages, run CRM and reporting features (performance of our contract with you).
To keep the Service secure: prevent unauthorized access and abuse, apply rate limits, keep an audit log (legitimate interests).
To take payments, keep records and meet tax and accounting obligations (legal obligation).
To send service emails: password resets, team invitations, trial and end-of-period reminders, support replies.

We do not sell your data, use it for advertising, or build marketing profiles.

Who receives it

We share data only as far as needed to run the Service:

Recipient	Purpose	Location
Hosting provider [provider, country]	Servers and database	[provider, country]
Cloudflare, Inc.	DNS, CDN and DDoS protection; sees IP addresses and request metadata	USA
Heleket	Crypto payment processing; receives order amount, currency, order ID and your email if you provide it	Heleket's own infrastructure
[email provider]	Service and reminder emails	[email provider]
Telegram	Messaging through your connected accounts	Telegram's infrastructure

When you use connected accounts, data is exchanged with Telegram's servers. Telegram processes it as an independent controller under its own privacy policy. Payments are made on Heleket's payment page, and on-chain transactions are public by nature.

We may also disclose data to public authorities where the law requires it.

International transfers

Cloudflare (USA), Heleket and Telegram may process data outside your country, including in countries that may not offer the same level of protection. Where required, we rely on the safeguards available under applicable law, such as standard contractual clauses offered by the provider.

Cookies and local storage

We use no advertising or tracking cookies, and currently no analytics. The panel only stores what it needs in your browser's localStorage: your login token, language, theme and cookie-notice choice.

How long we keep it

Account data: while your account is active.
After a workspace is deleted: data is erased within 30 days, except payment records, which we keep for as long as tax and accounting law requires.
Technical logs: up to 90 days.
Telegram sessions: deleted immediately when you remove a number from the panel. We recommend also ending the session in Telegram under Settings → Devices.

Security

Sessions, bot tokens and proxy credentials are encrypted at rest; panel passwords are hashed with scrypt. All traffic uses HTTPS. We offer role-based access, an audit log and optional TOTP two-factor authentication. No system is 100% secure, so please protect your account with a strong password and 2FA.

Your rights

Depending on where you live, you can ask to access your data, correct it, erase it, restrict or object to its processing, receive it in a portable format, and withdraw consent you have given. You can also lodge a complaint with your data protection supervisory authority.

Email [email protected] to make a request. We reply within 30 days. If your data reached us through one of our customers' panels (for example, you chatted with a business on Telegram), please contact that business first; we will forward requests we receive and help them respond.

Changes

We may update this policy. We will announce material changes by email or in the panel; the current version is always on this page.

Telegramte is an independent service and is not affiliated with, endorsed or sponsored by Telegram FZ-LLC or Telegram Messenger Inc. "Telegram" is a trademark of its respective owner.