Developer Privacy Policy

Last updated: November 30, 2025

This Privacy Policy explains how the Telegram Broadcast Application ("App" or "Service") collects, uses, and protects information. By using the Service, you agree to this Policy.

1. Nature of the App

The Service is provided to allow developers to connect their Telegram bots and send broadcast messages to their users. This Policy applies regardless of the platform you use to access the Service.

2. Information We Collect

• Developer Data:
  • For new users: Email address and password
  • For existing users: Telegram user data (ID, username, etc.) via Telegram authentication widget
  • Optional: Email addresses for users who configure email/password authentication
• Bot Data: Bot ID, bot name, and Bot tokens are stored in the database in encrypted form for background broadcasts and other tasks performed, and may temporarily held in encrypted sessions for real-time use during user interactions.
• End-User Data: Telegram ID, first name, username, and language code collected when users interact with bots. These are stored in the database to enable broadcasts.
• Usage Data: Information about how you use our service, including broadcast history, success rates, and interaction patterns.
• Technical Data: IP addresses, browser type and version, time zone settings, and platform information.

3. How We Use Data

• Email addresses are used for authentication and password recovery
• Telegram user data (from authentication widget) is used for account identification and authentication
• Bot data is used to connect bots to the Service and send broadcasts
• End-user data is used to build broadcast lists and deliver messages
• Usage data helps us improve our service and provide better user experiences
• Technical data is used for system administration, security, and troubleshooting

4. Data Storage and Retention

We retain your personal data only for as long as necessary to fulfill the purposes we collected it for, including to satisfy any legal, accounting, or reporting requirements.

• Developer account data: Retained until the account deletion request is processed by the system. We may also delete developer account data for maintenance, security, or regulatory purposes at our discretion.
• Bot data: Retained until the bot is removed from the system by the owner or admin. This data will also be deleted when the developer account is deleted or upon request.
• User data: Retained until the bot owner removes users or the account is deleted.
• Broadcast history: Retained for 12 months from the sending date of the broadcast. We may delete this data at any time, regardless of the retention period, to comply with service regulations, maintenance, or security policies.

We take appropriate steps to limit unnecessary data retention and ensure data is only stored for legitimate purposes. Once the data is no longer required for the specified purposes, it is securely deleted.

5. Data Security

• Passwords are hashed using industry-standard one-way cryptographic functions
• API keys and bot tokens are encrypted using strong encryption algorithms
• All data transmissions are secured using SSL/TLS encryption
• Regular security audits and vulnerability assessments are performed
• Access to personal data is restricted to authorized personnel only
• While we use industry-standard protections, no system is completely immune from risk

6. Data Sharing and Disclosure

We do not sell or share developer or user data with third parties for marketing purposes. Data may be shared with:

• Service Providers: Trusted third parties who assist in operating our website, conducting our business, or servicing you. These third-party services may include hosting providers, cloud storage, and other essential services. Please note that while we carefully select and vet our third-party service providers to ensure they meet high security standards, our hosting provider may have administrative access to the servers where your data is stored. In some cases, the hosting provider may access or use the data for maintenance, security, and support purposes. However, we cannot be held responsible for any unauthorized or illegal access to or use of your data by the hosting provider.
• Legal Requirements: When required by law, court order, or governmental authority, we may disclose your data.
• Business Transfers: In connection with a merger, acquisition, or sale of all or a portion of our assets, your data may be transferred as part of the transaction.

We carefully select and vet our third-party service providers to ensure they meet high security standards and comply with their privacy policies to maintain the security and confidentiality of your data. If you believe your data has been accessed or used inappropriately or illegally, we encourage you to report it immediately so we can investigate further.

7. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access and receive a copy of your personal data
• Rectify inaccurate or incomplete data
• Request erasure of your personal data
• Restrict or object to processing of your data
• Data portability
• Withdraw consent at any time

9. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our service and hold certain information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent.

10. Data Export

As a developer, you may export your subscriber data in CSV, JSON or EXCEL format containing:

• User Telegram ID
• First Name
• Username
• Language Code
• Joined Date

This data is provided for your legitimate broadcasting and analytics purposes. You are responsible for complying with data protection laws when storing, processing, or using exported subscriber information. Exported data must not be sold, shared with unauthorized third parties, or used for spam or illegal activities.

11. Free Service and Platform Broadcasts

The Service is free. Occasionally, we may send system-wide broadcasts (such as updates or announcements) to all Telegram bots connected to the platform, regardless of whether they access via web, Android app, iOS, or Windows.

12. Account and Data Removal

We reserve the right to:

• Ban or suspend developer accounts.
• Delete bots, broadcasts, or stored data for accounts violating our Terms.
• Remove stored data if required by law, for security reasons, for misuse, or to manage storage and ensure the smooth operation of the Service.

13. Children's Privacy

Our service is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13.

14. API Data and Security

When using the official BotBroad API, all developers must comply with the BotBroad API Policy. This section explains how your developer and bot data transmitted via the API is collected, stored, and protected. We implement encryption, secure storage, and access controls to protect your data. Misuse of API keys or unauthorized access may result in suspension or termination of API access.

15. Changes to This Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

16. Contact Us

If you have any questions, please contact us via telegram.