🔒 General Information
Bottaviano is a service that enhances the functionality of your Telegram account through a personalized bot. This Privacy Policy describes how we collect, use, and protect your personal data.
Last updated: June 12, 2025
Data controller: Bottaviano
📊 Data We Collect
🤖 Bottaviano Telegram Bot Service
- Telegram User ID (required for identification)
- The service uses a Telegram session file necessary to provide the requested features.<br />The session file is stored in encrypted form with unique keys.<br />Decryption occurs exclusively in isolated environments and through automated processes, solely to perform the operations requested by the user.<br />Sessions are not manually accessible or consultable by staff.
- User-configured settings and preferences
- Recipient lists and custom triggers
- Answering machine messages (AFK function)
- Usage statistics to improve the service
- Activity logs for debugging and technical support
🌐 Website
- Aggregated web analytics via Umami
- Cookies for theme preferences and site functionality
- Session storage for temporary application state
- IP address and browser information (for anonymous analytics)
❌ Data We Do NOT Collect
To ensure maximum privacy, we NEVER collect the following data:<br /><br />The service does not store or analyze the content of personal conversations, contacts, or user media, except where strictly necessary to execute the requested features.
- Telegram username, first name, and last name
- Phone number (used only temporarily for session creation, never stored)
- OTP/SMS codes (read only for authentication, never saved)
- 2FA passwords (used only during configuration, never stored)
- Telegram message history
- Contacts or phone book
- Geographic location or location data
- Biometric information or unique device identifiers
🎯 How We Use Your Data
- Provide and maintain the Bottaviano Telegram bot service
- Authenticate users and manage sessions
- Save custom configurations (triggers, lists, settings)
- Process backups and restores of user data
- Provide technical support and resolve issues
- Improve the service through anonymous analytics
- Monitor system performance and security
- Send service notifications and updates
⚖️ Legal Basis of Processing
- Explicit consent (acceptance of privacy policy)
- Execution of the service contract
- Legitimate interest to improve the service
- Compliance with legal obligations (security, logs)
🔐 Data Security
We implement advanced security measures to protect your data:
- Advanced encryption for protecting data at rest and during automated processing of session files
- Separate databases for each user
- Hashing of passwords and sensitive data
- Limited access to servers and continuous monitoring
- Encrypted backups and disaster recovery procedures
- Regular security updates
- Periodic security audits
⏰ Data Retention
Account data: Stored until account deletion
Session files: Encrypted and stored only for the operation of the service
System logs: Stored for a maximum of 90 days for debugging purposes
Web analytics: Aggregated and anonymous data stored for statistical analysis
🫵 Your Rights
You have the following rights regarding your personal data:
- Access: view all your data via the command
/export - Rectification: modify your settings and configurations
- Deletion: completely delete the account with
/delete_account - Portability: export data in standard JSON format
- Opposition: disable specific features
- Limitation: request limitations in processing
- Complaint: file a complaint with the competent authorities
🍪 Use of Cookies
Our website uses technical cookies strictly necessary for the operation of the site and to save your preferences. We do not use profiling or invasive tracking cookies:
- Technical cookies: necessary for the operation of the site
- Preference cookies: save theme and user settings
- Language preference cookie (
i18n_redirected): saves the selected language for site navigation - Analytics cookies: Umami for anonymous aggregate statistics
- Session storage: temporary state of the web application
🔗 Third-Party Services
Umami Analytics: We use Umami for aggregated and anonymous web analytics, a privacy-focused open-source solution that does not use tracking cookies
Telegram: Our service integrates with the Telegram API to provide bot functionality. Data is processed according to Telegram's terms of service and our privacy policies
Hosting: Data is hosted on Vultr VPS servers located in France, with advanced encryption and GDPR compliance
🗑️ Account Deletion
You can completely delete your account and all associated data using the command /delete_account in the bot. This operation:
- Deletes all account data and custom configurations
- Removes encrypted Telegram session files
- Automatically cancels the active subscription
- ⚠️ Warning: This operation is irreversible and cannot be undone
💾 Backup and Portability
You have the right to export all your data in standard JSON format using the command /export. The backup includes:
- All custom settings and configurations
- Recipient lists and related data
- Configured triggers with their conditions
- Answering machine messages and AFK configurations
- Backup metadata (date, version, user ID)
📧 Privacy Contacts
For any questions regarding this Privacy Policy or to exercise your rights, you can contact us:
📝 Changes to the Privacy Policy
We reserve the right to modify this Privacy Policy. Users will be notified of substantial changes via the Telegram bot or through the website.