Privacy policy

MADBOTS LIMITED ("we"), operates @NudesRemoverBot and collects only the data needed to run it.

Data we collect

• Telegram user ID, username, first and last name, language code — provided by Telegram when you message the bot or use its mini app.
• Chats you add — the ID, title and type of every group you add the bot to, and the list of administrators who may manage it (and any additional team members you grant access to).
• Moderation settings — the threshold, categories, media types, sticker-pack blacklist, custom warning message and auto-ban configuration you set for a group.
• Event log — for every action the bot took: the type (message deleted, user banned, sticker-pack match), the time, and enough detail to identify who posted the content and which rule caught it. Deleted message text and media are not retained beyond this log entry.
• Classification cache — a fingerprint of files the bot has checked (not the file itself) paired with the model's verdict, so a re-posted file isn't re-analysed. Photo, video, GIF and sticker bytes are downloaded only for the duration of a single classification and then discarded.
• Custom bot token — if you connect your own bot (Premium), its token is stored to deliver messages through it and can be removed at any time.
• Payment metadata — order ID, plan, billing period, amount, payment method, and an email address if you provided one for receipts. Card details are stored exclusively by the payment provider.
• Aggregate analytics — anonymised counts of users, groups and moderation actions.

We do not use the images or videos we check to train any model, and we do not send them to a third-party AI provider — classification runs on infrastructure we operate.

How we use it

To moderate the content you configured the bot to check, to apply your settings, to bill your plan, to show you statistics and the event log, to provide support, and to comply with legal obligations. We do not sell or rent personal data.

Sharing with third parties

• Telegram — every message and file is routed through Telegram; see the Telegram privacy policy.
• Payment providers — process payments under their own PCI-DSS scope; receive only the data required for billing.
• Infrastructure providers — hosting, databases and storage, under data-processing agreements.

Deleting your data

You can request access to, correction of, or deletion of your personal data at any time. Use the mini app's "Unlink chat" option to remove a group, or email support@madbots.dev with your Telegram user ID to delete the whole account.

Legal bases

Where the GDPR or the UK GDPR applies to you, we process your data on these bases: performance of a contract (running the bot and your subscription), legitimate interests (keeping the Service secure, preventing abuse, improving it with aggregate statistics), consent (features you switch on yourself, such as AI processing or a connected account — you can withdraw it at any time by switching the feature off), and legal obligation (accounting and tax records).

How long we keep it

We keep data while your account uses it, and no longer than we need it:

• settings and configuration — until you delete them or delete your account;
• operational logs — pruned on a rolling basis;
• billing records — for as long as accounting and tax law requires, typically seven years;
• support correspondence — up to three years.

When we no longer need data, we delete it or make it anonymous.

Security

We use access control, encryption in transit, isolated infrastructure and least-privilege access for staff. Only the people who need it can reach production data. No service can promise perfect security, but we treat a breach as an incident: we investigate, fix and notify affected users and, where required, the competent authority.

International transfers

We and our providers operate in several countries, so your data may be processed outside the country where you live. Where data leaves the EEA or the UK, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses, and equivalent mechanisms elsewhere.

Your rights

Wherever you live, you can ask us to give you a copy of your data, correct it, delete it, restrict or object to its processing, or send it to another provider. You can withdraw consent at any time, without affecting what was done before.

Write to support@madbots.dev from the address you use with us, or message @madbots_support_bot with your Telegram user ID. We answer within 30 days. We never charge for this, and we never make the Service worse for you because you exercised a right.

If you are in the EEA, the UK or Switzerland, you may also complain to your local data-protection authority. If you are in the United States, the state privacy laws that apply to you may give you the rights above plus the right to opt out of "sale" or "sharing" of personal data — we do neither: we do not sell or share personal data, and we do not use it for targeted advertising.

Children

The Service is not directed at children under 13, and we do not knowingly collect their data. Telegram's own minimum age applies as well. If you believe a child has given us personal data, write to support@madbots.dev and we will delete it.

Cookies, local storage and tracking

Our websites carry no advertising and no cross-site tracking. They store one value in your browser — the language you chose — so the site opens in it next time. The mini app stores what it needs to keep you signed in inside Telegram.

Because we do not track visitors across sites, we do not respond to "Do Not Track" browser signals; there is nothing for them to switch off.

Changes to this policy

We update this policy when the Service or the law changes. The date at the top always shows the current version, and material changes are announced in the @madbots channel.

Contact

MADBOTS LIMITED, Unit 909, Prosperity Millennia Plaza, 663 King’s Road, Quarry Bay, Hong Kong. Privacy questions and deletion requests: support@madbots.dev.