Privacy Policy
Last updated: September 2026
How Autogram handles the data of sellers who use the platform and of the customers who message them.
1. What we collect
Account data: your email and login details (via our authentication provider).
Telegram connection: your API ID, API hash, phone number, and the login session needed to run the assistant on your account. These are stored encrypted.
AI keys: the API key(s) you provide, stored encrypted.
Conversation data: messages exchanged between you and your customers, so the assistant can reply in context.
2. How we use it
Solely to operate the service: to run your assistant, generate replies, show you your dashboard, and keep the platform secure. We do not sell your data or your customers' data.
3. Service providers
We rely on third parties to run the platform: an AI provider (e.g. Google Gemini), Telegram to deliver messages, and infrastructure/hosting and email providers. Data is shared only as needed to provide the service, under their own terms.
4. Security
Sensitive data — your Telegram session and API keys — is encrypted at rest. Encryption keys are held in our environment, never in the database. Each seller's data is isolated with row-level security.
5. Retention
Raw customer messages are kept only as long as needed and deleted on a rolling basis (about 7 days), while short conversation summaries may be kept longer so the assistant can maintain continuity. You can request deletion at any time.
6. Your controls
You can disconnect your Telegram account in one click, which removes the stored session. You can also request export or deletion of your account and associated data.
7. Contact
Questions about privacy? Email hello@yourdomain.com.
This is a starting template, not legal advice. Have a qualified lawyer review it for your jurisdiction before you launch.