Privacy Policy

Last updated: 17 July 2026

This Policy explains how AccessBot ("AccessBot", "we", "us") handles personal data when you use our platform (the "Service"). It covers data about you, our customer. It does not govern the content inside your own Telegram channels, which you control and which Telegram hosts.

1. Controller and processor

For data about you as our customer (your account and workspace), AccessBot is the data controller.
For data about your members that we process so your bot can operate (for example a member's Telegram ID and subscription status), you are the controller and AccessBot acts as a processor on your instructions. You are responsible for having a lawful basis and your own privacy notice for your members.

2. Data we collect

Account & workspace: your name, email, workspace name, login credentials, and settings you enter (such as your bot token and payment-provider configuration, which we store encrypted).
Member data (as processor): Telegram user IDs and usernames, plan and subscription status, access grants/removals, and payment references needed to manage access. Card and bank details are handled by your payment providers, not by us.
Usage & technical: log data, device/browser information, IP address, and analytics about how the Service is used, to keep it secure and reliable.
Support: messages you send us and, if enabled, conversations handled by the in-app assistant.

3. How we use data

To provide and operate the Service — run your bots, grant and remove access, and show your dashboard.
To bill your AccessBot subscription and prevent fraud and abuse.
To secure the platform, debug problems, and improve the Service.
To communicate with you about your account, security, and service updates.
To screen content uploaded to public surfaces for safety and legal compliance.

4. Sharing

We share data only as needed to run the Service: with infrastructure and subprocessors (such as hosting, database, email, and — if you enable it — an AI provider for the support assistant and content screening); with your chosen payment providers, to the extent you connect them; and where required by law or to protect rights and safety. We do not sell your personal data.

5. Retention

We keep account and workspace data while your workspace is active and for a reasonable period afterward to meet legal, tax, and security obligations. Member data we process for you is retained as needed to provide the Service and deleted or returned on your instruction or when your workspace closes, subject to legal requirements.

6. Security

We use technical and organisational measures to protect data, including encryption of sensitive credentials at rest and access controls. No system is perfectly secure, but we work to protect your data and to notify you of material incidents as required by law.

7. International transfers

Your data may be processed in countries other than your own — including where our infrastructure and sub-processors operate. Where such transfers occur, we rely on appropriate safeguards (such as standard contractual clauses and each provider's compliance framework) as required by applicable data-protection law.

8. Your rights

Depending on where you live, you may have rights to access, correct, delete, or export your personal data, to object to or restrict certain processing, and to withdraw consent. To exercise these rights, contact us at support@accessbot.app. For your members' rights, contact the workspace that operates the channel — they are the controller of that data.

9. Cookies

We use essential cookies to keep you signed in and to operate the dashboard, and limited analytics to understand usage. You can control cookies through your browser.

10. Children

The Service is not intended for anyone under 18, and we do not knowingly collect data from children.

11. Changes & contact

We may update this Policy from time to time; material changes will be notified through the Service or by email. Questions or requests can be sent to support@accessbot.app.