Privacy policy

MADBOTS LIMITED ("we"), operates @RoutifyBot and collects only the data needed to run it.

Data we collect

• Telegram user ID, username, first and last name, language code — provided by Telegram when you message the bot. The ID links your accounts, forwards, settings and plan to your account.
• Connected Telegram accounts — when you connect an account, you enter its phone number, the confirmation code Telegram sends and, if enabled, your two-factor password. The code and password are used once to sign in and are not stored. What we store is the resulting authorised session of that account, on our servers, together with the account's Telegram ID, its phone number in masked form (the first two and the last two characters) and whether the account has Telegram Premium. The name and username of a connected account are not stored. The session lets Routify read the chats you add as sources and, only if you choose delivery from the account, send messages from it. We read only the chats you select. You can disconnect an account at any time in the mini app: this deletes the stored session on our side, while the device entry stays in Telegram until you terminate it under Settings → Devices. Ending the session there makes the stored session stop working, and the account is marked inactive.
• Chats you connect — the ID, title, type and photo of every source and destination chat you select, the forum topic if any, and, for destinations the bot publishes to, whether the bot is an administrator there.
• Forwards and settings — the routes you create, the filters, replacements, templates, prompts, schedules and other settings you configure, and the images you upload for watermarks and logo blur.
• Delivery log — for every message the bot processed: the route, the time, the status (delivered, filtered, failed) and the reason, plus the IDs of the source and delivered messages (needed to sync edits and deletions). Message text is kept only as long as needed to deliver it and to show the log; media is not stored after delivery.
• Keys you provide — an OpenRouter API key. It is stored to perform the function you enabled and can be removed at any time.
• AI processing — when you enable AI prompts, AI filters or smart routing, the text of the messages involved is sent to the language-model provider (OpenRouter and the model you or we selected) for processing. Media is not sent.
• Payment metadata — order ID, plan, billing period, amount, payment method, and an email address if you provided one for receipts. Card details are stored exclusively by the payment provider.
• Aggregate analytics — anonymised counts of users, accounts, forwards and deliveries.

How we use it

To deliver the messages you asked for, to apply your settings, to bill your plan, to show you logs and statistics, to provide support, and to comply with legal obligations. We do not sell or rent personal data, and we do not read your chats beyond the sources you selected.

Sharing with third parties

• Telegram — every message and file is routed through Telegram, and a connected account talks to Telegram directly on your behalf; see the Telegram privacy policy.
• Language-model providers — message text sent for AI processing, as described above.
• Payment providers — process payments under their own PCI-DSS scope; receive only the data required for billing.
• Infrastructure providers — hosting, databases and storage, under data-processing agreements.

Deleting your data

You can request access to, correction of, or deletion of your personal data at any time. Disconnect accounts and delete forwards in the mini app, or email [email protected] with your Telegram user ID to delete the whole account.

Legal bases

Where the GDPR or the UK GDPR applies to you, we process your data on these bases: performance of a contract (running the bot and your subscription), legitimate interests (keeping the Service secure, preventing abuse, improving it with aggregate statistics), consent (features you switch on yourself, such as AI processing or a connected account — you can withdraw it at any time by switching the feature off), and legal obligation (accounting and tax records).

How long we keep it

We keep data while your account uses it, and no longer than we need it:

• settings and configuration — until you delete them or delete your account;
• operational logs — pruned on a rolling basis;
• billing records — for as long as accounting and tax law requires, typically seven years;
• support correspondence — up to three years.

When we no longer need data, we delete it or make it anonymous.

Security

We use access control, encryption in transit, isolated infrastructure and least-privilege access for staff. Only the people who need it can reach production data. No service can promise perfect security, but we treat a breach as an incident: we investigate, fix and notify affected users and, where required, the competent authority.

International transfers

We and our providers operate in several countries, so your data may be processed outside the country where you live. Where data leaves the EEA or the UK, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses, and equivalent mechanisms elsewhere.

Your rights

Wherever you live, you can ask us to give you a copy of your data, correct it, delete it, restrict or object to its processing, or send it to another provider. You can withdraw consent at any time, without affecting what was done before.

Write to [email protected] from the address you use with us, or message @madbots_support_bot with your Telegram user ID. We answer within 30 days. We never charge for this, and we never make the Service worse for you because you exercised a right.

If you are in the EEA, the UK or Switzerland, you may also complain to your local data-protection authority. If you are in the United States, the state privacy laws that apply to you may give you the rights above plus the right to opt out of "sale" or "sharing" of personal data — we do neither: we do not sell or share personal data, and we do not use it for targeted advertising.

Children

The Service is not directed at children under 13, and we do not knowingly collect their data. Telegram's own minimum age applies as well. If you believe a child has given us personal data, write to [email protected] and we will delete it.

Cookies, local storage and tracking

Our websites carry no advertising and no cross-site tracking. They store one value in your browser — the language you chose — so the site opens in it next time. The mini app stores what it needs to keep you signed in inside Telegram.

Because we do not track visitors across sites, we do not respond to "Do Not Track" browser signals; there is nothing for them to switch off.

Changes to this policy

We update this policy when the Service or the law changes. The date at the top always shows the current version, and material changes are announced in the @madbots channel.

Contact

MADBOTS LIMITED, Unit 909, Prosperity Millennia Plaza, 663 King’s Road, Quarry Bay, Hong Kong. Privacy questions and deletion requests: [email protected].