🔒 Privacy Policy

2.1 Information You Provide Directly

We collect information that you voluntarily provide when you use the Platform, including:

• •Account Information: Name, email address, password (hashed), and profile details when you register for an account.
• •Payment Information: Billing details, UPI IDs, bank account numbers, and payment gateway transaction IDs when you make purchases, subscribe to plans, or request withdrawals. We do not store full credit/debit card numbers on our servers.
• •Bot & App Data: Telegram bot tokens, bot configurations, mini app settings, media files, and content you upload through the Bot Builder and Mini Apps Builder.
• •Marketplace Data: Product listings, descriptions, images, pricing, transaction histories, buyer/seller communications, and dispute details.
• •Bio Link Data: Bio page content, links, paid link configurations, tip settings, lead capture form submissions, and social media profile URLs.
• •Channel Data: Telegram channel information, subscription plans, pricing, and subscriber management data submitted through the Channel Store.
• •Forwarder Data: Source and destination channel/group IDs, forwarding rules, filter configurations, and scheduling preferences.
• •Support Data: Messages, feedback, and communications sent through our support channels, chat system, or contact forms.
• •Referral Data: Referral links, referred user IDs, and commission tracking information.

2.2 Information Collected Automatically

When you access the Platform, we automatically collect certain technical information, including:

• •Device Information: Device type, operating system, browser type and version, screen resolution, and device identifiers.
• •Log Data: IP address, access timestamps, pages visited, referring URLs, clickstream data, and error logs.
• •Usage Data: Features used, actions taken, frequency and duration of activities, search queries, and interaction patterns.
• •Location Data: Approximate geographic location derived from your IP address (we do not collect precise GPS location).
• •Cookie Data: Cookies, web beacons, and similar tracking technologies (see our Cookie Policy for details).

2.3 Information from Third Parties

We may receive information about you from third-party sources, including:

• •Telegram: When you interact with our Telegram bots or mini apps, we receive your Telegram user ID, username, first/last name, and profile photo URL as provided by the Telegram API.
• •Payment Providers: Transaction confirmations, payment status updates, and fraud detection signals from our payment processing partners.
• •Analytics Services: Aggregated and anonymized usage statistics from analytics tools we use to improve the Platform.

We use the information we collect for the following purposes:

3.1 Providing & Improving the Service

• •Creating, maintaining, and authenticating your account.
• •Processing and managing your bots, mini apps, forwarders, bio pages, and marketplace listings.
• •Processing payments, managing wallet balances, and facilitating withdrawals.
• •Managing escrow transactions and resolving marketplace disputes.
• •Managing channel subscriptions, invite links, and subscriber access.
• •Tracking and distributing referral commissions accurately.

3.2 Communication

• •Sending service-related notifications (account updates, transaction confirmations, security alerts).
• •Sending promotional communications about new features, offers, and updates (with opt-out options).
• •Responding to your support inquiries, feedback, and complaints.

3.3 Safety & Security

• •Detecting, investigating, and preventing fraud, abuse, and security threats.
• •Enforcing our Terms of Service and other policies.
• •Monitoring for violations of Telegram's Terms of Service in bots and mini apps.
• •Protecting our rights, property, and the safety of our users.

3.4 Analytics & Improvement

• •Analyzing usage patterns to improve Platform features and user experience.
• •Conducting research and development for new features.
• •Generating aggregated, de-identified analytics about Platform usage.

We process your personal information based on the following legal grounds:

• •Contractual Necessity: Processing is necessary to fulfill our contract with you (i.e., providing the Platform services as described in our Terms of Service).
• •Consent: Where required by law, we obtain your explicit consent before processing (e.g., for marketing communications and non-essential cookies).
• •Legitimate Interests: Processing is necessary for our legitimate business interests, such as fraud prevention, product improvement, and security, provided these interests are not overridden by your rights.
• •Legal Obligation: Processing is necessary to comply with applicable laws, regulations, or legal proceedings.

We do not sell, rent, or trade your personal information to third parties for their marketing purposes. We may share your information only in the following circumstances:

5.1 Service Providers

We share information with trusted third-party service providers who assist us in operating the Platform, including hosting providers, payment processors, email delivery services, analytics providers, and customer support tools. These providers are contractually obligated to protect your data and use it only for the specified purposes.

5.2 Marketplace Transactions

When you engage in marketplace transactions, limited information may be shared between buyers and sellers as necessary to complete the transaction (e.g., usernames, communication messages). We do not share your email address, payment details, or sensitive account information with other marketplace users.

5.3 Legal Requirements

We may disclose your information if required to do so by law, legal process, government request, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others, investigate fraud, or respond to a government request.

5.4 Business Transfers

In the event of a merger, acquisition, bankruptcy, or sale of all or a portion of our assets, your information may be transferred to the acquiring entity. We will notify you of any such change and the choices you have regarding your information.

5.5 With Your Consent

We may share your information for purposes not described in this Privacy Policy with your explicit consent.

6.1 Data from Telegram

When you interact with Telegram bots or mini apps created through our Platform, we may collect and process the following data as provided by the Telegram Bot API:

• •Telegram user ID (numeric identifier)
• •Username (if set by the user)
• •First and last name
• •Profile photo URL
• •Language code
• •Messages sent to the bot
• •Chat ID and message metadata

6.2 Bot Token Security

When you provide your Telegram bot token to use our Bot Builder, we store it securely using encryption. Your bot token gives access to your bot's functionality through the Telegram API. We use your bot token solely to operate the features you configure through our Platform. We never share your bot token with third parties, and we recommend regularly rotating your bot token for security.

6.3 Message Content

Messages exchanged between users and bots built on our Platform may be processed and stored temporarily to enable bot functionality (such as command processing, auto-replies, and broadcast delivery). We do not read, analyze, or use the content of private messages for advertising or marketing purposes.

6.4 Auto-Forward Data

When using the Auto-Forward service, we process message metadata (sender IDs, message IDs, timestamps) and, where necessary, message content to apply your configured filters and forwarding rules. Forwarded messages are transmitted directly through the Telegram API and are not permanently stored on our servers beyond the time needed for processing.

For marketplace transactions, we collect and process additional data to ensure the security and integrity of the escrow system:

• •Transaction Records: Purchase amounts, escrow status, order timelines, delivery confirmations, and dispute histories are retained as financial records.
• •Seller Verification: We may collect additional identity verification information from sellers to prevent fraud and comply with payment regulations.
• •Dispute Evidence: Any communications, screenshots, or evidence submitted during dispute resolution are stored and may be reviewed by our support team.
• •Wallet Transactions: All wallet deposits, withdrawals, earnings, and transfers are logged for accounting, fraud prevention, and regulatory compliance purposes.

We use cookies and similar tracking technologies to enhance your experience on the Platform. Cookies are small data files placed on your device that allow us to recognize your browser and capture certain information.

We use the following types of cookies:

• •Essential Cookies: Required for the Platform to function properly (authentication, security, session management).
• •Functional Cookies: Remember your preferences and settings (language, theme, display options).
• •Analytics Cookies: Help us understand how users interact with the Platform (page views, session duration, feature usage).

For detailed information about cookies, please refer to our Cookie Policy.

We take the security of your personal information seriously and implement appropriate technical and organizational measures to protect it, including:

• 🔐Encryption: All data transmitted to and from the Platform is encrypted using TLS/SSL (HTTPS). Sensitive data such as passwords and bot tokens are encrypted at rest using industry-standard encryption algorithms.
• 🛡️Access Controls: Access to personal data is restricted to authorized personnel who need it for legitimate business purposes. We use role-based access controls and multi-factor authentication.
• 🔄Regular Backups: We perform regular backups of our databases to prevent data loss and ensure business continuity.
• 🔍Monitoring: We implement security monitoring and intrusion detection systems to identify and respond to potential security threats.
• 🔑Password Security: User passwords are hashed using bcrypt with salt, making them computationally infeasible to reverse.

Despite our best efforts, no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal data, we cannot guarantee its absolute security. In the event of a data breach that may affect your personal information, we will notify you in accordance with applicable data protection laws.

We retain your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. Specifically:

• •Account Data: Retained for the duration of your account's existence, plus 90 days after deletion to allow for recovery.
• •Transaction Records: Retained for a minimum of 7 years for financial and tax compliance purposes.
• •Bot/App Content: Retained while your account is active. Deleted within 30 days of account deletion.
• •Support Communications: Retained for up to 3 years for quality assurance and training purposes.
• •Log Data: Retained for up to 12 months for security and debugging purposes, then deleted or anonymized.
• •Marketing Data: Retained until you withdraw your consent or unsubscribe from marketing communications.

Depending on your location and applicable laws, you may have some or all of the following rights regarding your personal data:

• ✓Right of Access: You can request a copy of the personal data we hold about you.
• ✓Right to Rectification: You can request correction of inaccurate or incomplete personal data.
• ✓Right to Erasure: You can request deletion of your personal data where there is no compelling reason for continued processing.
• ✓Right to Restriction: You can request that we restrict the processing of your data in certain circumstances.
• ✓Right to Data Portability: You can request your data in a structured, commonly used, machine-readable format.
• ✓Right to Object: You can object to the processing of your personal data in certain circumstances, including direct marketing.
• ✓Right to Withdraw Consent: Where processing is based on consent, you can withdraw your consent at any time.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days. We may need to verify your identity before fulfilling certain requests to protect your privacy and security.

Our Platform is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe that your child has provided us with personal information without your consent, please contact us immediately at [email protected]. If we become aware that we have collected personal data from a child under 13 without parental consent, we will take steps to delete such information from our servers promptly.

Users between the ages of 13 and 18 may use the Platform only with the involvement and consent of a parent or legal guardian.

AutogramStudio is based in India. If you access the Platform from outside India, please be aware that your information may be transferred to, stored, and processed in India and other jurisdictions where our service providers are located. By using the Platform, you consent to the transfer of your information to countries that may have different data protection laws than your jurisdiction.

We take appropriate safeguards to ensure that your personal data remains protected in accordance with this Privacy Policy regardless of where it is processed, including implementing contractual data protection clauses with our service providers.

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will:

• •Update the "Last updated" date at the top of this page.
• •Notify you via email, in-app notification, or prominent notice on our Platform.
• •For significant changes, provide at least 15 days' notice before the changes take effect.

We encourage you to review this Privacy Policy periodically. Your continued use of the Platform after changes become effective constitutes your acceptance of the updated Privacy Policy.