Privacy Policy

The Omnichannel Summary Bot (the “Bot”) and this website are operated by botkit.tech. In the language of the GDPR, we are the data controller for the personal data described here.

Contact us about this policy and your data through our support bot on Telegram.

Two things: the Telegram bot, and this website.

It does not cover Telegram itself, or the channels and chats you choose to follow. Telegram is a separate company with its own privacy policy, and the channels you read are run by their own authors.

When you use the Bot

• Your Telegram identifiers — numeric user ID, username, first and last name, and the language your Telegram app reports. Telegram passes these to us when you message the Bot. We never receive your phone number or your contacts.
• Your settings — the channels and chats you add, your timezone, your delivery times, summary style, and the limits of your plan.
• Usage events — a timestamped record of actions such as starting the Bot, adding a channel, requesting a summary, reaching a plan limit, opening the upgrade screen, or blocking the Bot. We use these to understand how the product is actually used.
• Payments — if you buy a plan or send a donation with Telegram Stars, we store the plan, the number of Stars, the purchase and expiry dates, and Telegram's payment charge ID. Telegram handles the payment itself: we never receive or store card or bank details.
• Content we process for you — posts from the Telegram channels and chats you chose (public ones, and private ones you added with an invite link), and the summaries produced from them.

When you visit this website

• This site consists of static pages. There is no account, no sign-up and no form — so we collect nothing from you directly.
• Only if you accept analytics: Google Analytics collects which pages you viewed, an approximate location derived from a truncated IP address, your device and browser type, the site you arrived from, and a randomly generated identifier kept in a cookie. None of it is used to identify you by name.
• If you decline, or never choose: nothing is collected and no request is made to Google at all.

Server logs

Our web server and the bot backend write ordinary technical logs — IP address, timestamp, the URL requested, browser user agent, and error details. They exist to keep the service running and to investigate faults and abuse.

Under Art. 6 GDPR every use of personal data needs a legal basis. Ours:

• Running the Bot and delivering your summaries — Art. 6(1)(b), performance of the service you asked for. Without your Telegram ID and your channel list there is nothing to send and nowhere to send it.
• Handling purchases and donations — Art. 6(1)(b), plus Art. 6(1)(c) for records that tax and accounting law require us to keep.
• Understanding how the product is used, and improving it — Art. 6(1)(f), our legitimate interest in knowing which features work. You can object at any time; see section 9.
• Keeping the service secure, available and free of abuse — Art. 6(1)(f), our legitimate interest in a service that stays up.
• Website analytics — Art. 6(1)(a), your consent, which you give or refuse in the banner and can withdraw at any moment.

This website stores nothing on your device for analytics until you say yes. Your theme and language choices are kept in your browser's local storage because you asked for them — they never leave your device and never reach us.

The full list of what is stored, what it does and how long it lasts is on the Cookie Policy page. You can change your mind at any time: open cookie settings.

We use a small number of service providers. They act on our instructions and may not use your data for their own purposes.

• Telegram — the platform the Bot runs on. Every message to and from the Bot travels through Telegram, and Telegram Stars payments are processed entirely by Telegram.
• Google — Gemini API — generates the summaries. What we send is the text of posts from the channels and chats you chose, plus the language and style the summary should use. We do not send your name, username or Telegram ID.
• Google — Analytics — website statistics, and only if you consented.
• Our hosting provider — runs the servers and the database the Bot depends on.

We do not sell your data, and we do not share it for advertising. We disclose data to authorities only where the law actually requires it.

Our servers are located in Finland (Hetzner Online GmbH). Telegram and Google may process data outside the European Economic Area.

Where that happens, the transfer relies on the safeguards in Chapter V GDPR — the European Commission's standard contractual clauses and, for Google LLC, its self-certification under the EU–U.S. Data Privacy Framework. Ask us and we will tell you which safeguard applies to you.

• Posts collected from channels — deleted 7 days after collection. Summaries are built from a rolling window, not an archive.
• Your account, settings and channel list — kept while you use the Bot. If you block the Bot or go inactive, an automatic job clears your settings, channel assignments, cached summaries and scheduled deliveries the following day.
• Usage events — kept for as long as your account exists, then deleted with it.
• Payment records — kept for as long as tax and accounting law requires, typically up to 7 years. These we cannot delete on request: the obligation to keep them overrides erasure.
• Server logs — capped in size and rotated automatically, so only the most recent entries exist at any point. We do not archive them.
• Analytics data — held by Google according to the retention period set on our property; the analytics cookie itself expires 2 years after your last visit.

If the GDPR applies to you, you have the right to:

• Access a copy of the personal data we hold about you (Art. 15).
• Correct data that is wrong or incomplete (Art. 16).
• Erase your data (Art. 17) — except records we are legally required to keep.
• Restrict how we use it while a dispute is resolved (Art. 18).
• Take it with you in a machine-readable format (Art. 20).
• Object to processing based on our legitimate interests, including our product analytics (Art. 21).
• Withdraw consent for website analytics at any time, as easily as you gave it (Art. 7(3)). Withdrawing does not undo what happened before, but it stops everything after.
• Complain to a data protection authority in the EU or EEA country where you live, where you work, or where you think something went wrong (Art. 77).

We do not make automated decisions with legal or similarly significant effects about you.

Message our support bot on Telegram to exercise your rights. We answer within one month, as Art. 12(3) requires; if a request is complex we may extend that and will tell you why.

The Bot has no separate login, so we identify you by your Telegram account. Please send the request from the account the data belongs to, or be ready to confirm it — this is what stops someone else asking for your data.

The fastest way to stop all processing yourself is to block the Bot in Telegram; your settings are purged automatically the next day. If you want everything erased immediately, just ask.

The Bot is not aimed at children, and Telegram sets its own minimum age for using the platform. We do not knowingly collect data from anyone under 16. If you believe a child has used the Bot, contact us and we will delete the data.

Traffic to the website and the bot backend is encrypted with TLS. Database access is limited to the application and the people who operate it. We keep what we need and delete the rest on a schedule — the safest data is the data we no longer have.

No system is perfectly secure. If a breach ever puts your rights at risk, we will notify the supervisory authority and you, as Art. 33 and 34 require.

If we change this policy we update the date at the top of the page. For anything that materially affects you — a new processor, a new purpose — we will say so through the Bot rather than hope you re-read this page.