Privacy Policy

1. If you use the developer portal

• Account data: name, email, password (stored only as a secure hash), and Google account ID if you sign in with Google.
• Organization data: organization names, teammates, API key names, webhook URLs, plan and usage, and an audit log of changes.
• Technical data: IP addresses and request logs, used for security, rate limiting and debugging.

2. If a business messages you through Telenotify

We process this data on behalf of the business you dealt with, only to deliver their messages:

• the customer ID the business uses for you, and your phone number if they provide it or you share it;
• your Telegram chat ID and username, once you press Start on the business's bot;
• the messages sent to you and any replies you send to the bot, and whether delivery succeeded;
• for phone verification, the number you choose to share with the bot.

You can stop receiving messages at any time by blocking the bot in Telegram. For other requests about this data, contact the business, or us at support@telenotify.example.

3. How we use data

To provide and secure the service, deliver messages and webhook events, prevent abuse, send account emails (verification, password reset, usage alerts), and comply with the law. We don't sell personal data or use customer messages for advertising.

4. Who we share it with

• Telegram, to deliver messages and receive replies;
• our hosting and email providers, to run the service and send account emails;
• the business that sent a message, through their dashboard and webhooks;
• authorities, when required by law.

5. Retention

We keep account data while your account exists. Message and webhook logs are kept to provide delivery history and may be deleted after they're no longer needed. Deleting an organization deletes its customers, messages and logs; deleting your account removes your personal account data.

6. Security

Data is encrypted in transit; bot tokens are encrypted at rest; passwords and API keys are stored as one-way hashes; webhook events are signed. No system is perfectly secure, and we'll notify affected users of a breach as required by law.

7. Your rights

You can access and correct your account data in the portal, delete your account at any time, and ask us about any data we hold about you at support@telenotify.example.