1 Information We Collect
Account Information: When you sign in with Google, we receive your name, email address, and profile photo. We use this to create and manage your account.
Bot Data: Your Telegram bot token, flows, blocks, connections, contacts, and message history are stored to provide the bot builder service.
Payment Information: We never receive your card details. Purchases in the Android app are processed by Google Play Billing and managed through RevenueCat, which receives your purchase history and your TeleBotBuilder user ID. Purchases on the website are processed by Whop. We store the purchase records these services send us (such as transaction, subscription and membership IDs, amount, currency and the account details included with them) to link purchases to your account.
Images: Images you upload through the Image block, and photos that your bot's users send to your bot, are uploaded to imgbb for hosting. The resulting image links are stored with your flows and conversation history.
Usage Data: Basic server logs including IP addresses and request timestamps for security and debugging purposes.
2 How We Use Your Data
- To provide and operate the TeleBotBuilder service
- To execute your bot flows and deliver messages via Telegram
- To process payments and manage your subscription
- To send important service emails (welcome, trial expiry, account updates)
- To improve our service and fix bugs
We never use your data for advertising, sell it to third parties, or share it outside of what's needed to run the service.
3 Data Storage & Security
Your data is stored on secure servers. Bot tokens are stored in our encrypted database and are never exposed to the frontend interface or other users.
All connections to TeleBotBuilder use HTTPS/TLS encryption. We use Cloudflare for additional DDoS protection and security.
Message history between your bot and its users is stored to enable features like live chat and conversation history. This data is only accessible to you (the bot owner).
4 Telegram Integration
TeleBotBuilder connects to Telegram's Bot API using the token you provide. We receive and process messages sent to your bot to execute your configured flows.
We store basic contact information (Telegram ID, first name, last name, username) of users who interact with your bot. This is necessary to operate the contact management and live chat features.
We do not access any Telegram data beyond what is sent directly to your bot.
5 Third-Party Services
- Google OAuth: Used for authentication. We receive only your public profile information.
- Telegram Bot API: Used to send/receive messages for your bot.
- Cloudflare: Used for DNS, CDN, and security services.
- Google Play Billing: Processes purchases made in the Android app.
- RevenueCat: Manages Android app subscriptions. Receives your purchase history and your TeleBotBuilder user ID.
- Whop: Processes purchases made on the website. We never receive your card details.
- imgbb: Hosts images uploaded through the Image block and photos that your bot's users send to your bot.
When you use the API block in your flows, requests are made directly from our server to the URLs you configure. We are not responsible for the privacy practices of external APIs you connect.
6 Your Rights
You have the right to:
- Access — View all data we store about you
- Delete — Delete your account and all associated data at telebotbuilder.com/delete-account.html, or disconnect a bot in Settings to delete its flows, contacts, and messages. Deleting your account does not cancel a subscription: cancel a Google Play subscription in Google Play, and cancel a website subscription from Settings, before you delete your account.
- Portability — Request a copy of your data by contacting us
- Correction — Update your information via Google account settings
7 Data Retention
We retain your account data as long as your account is active. When you disconnect a bot, all associated flows, contacts, and messages are permanently deleted. When you delete your account, your account and all associated data are permanently deleted.
Server logs are retained for up to 30 days for debugging and security purposes.
8 Contact Us
For privacy-related questions or data requests, contact us at:
Email: [email protected]