Privacy policy

MADBOTS LIMITED ("we"), operates @InstantMediaBot and collects only the data needed to run it.

Data we collect

• Telegram user ID, username, first and last name, language code — provided by Telegram when you open the mini app.
• Chats you add the bot to — the ID, title, type and member count of every group, and its per-chat settings (admins-only mode, hidden captions/progress/reactions, audio-only mode, interface language, resolution and file-size limits).
• Request and events log — for every link posted in a connected group: the URL, the time, the status (downloaded, cached, skipped, blocked, error) and, where relevant, the reason. This is shown back to the group's admins in the mini app.
• Traffic statistics — the weekly data volume a group has used, to enforce and display its plan's quota.
• Payment metadata — order ID, plan, billing period, amount, payment method, and an email address if you provided one for receipts. Card details are stored exclusively by the payment provider.
• Aggregate analytics — anonymised counts of users, chats and deliveries.

How we use it

To deliver media for the links your group posts, to apply your settings, to bill the plan attached to your group, to show admins the request log and traffic statistics, to provide support, and to comply with legal obligations. We do not sell or rent personal data.

Sharing with third parties

• Telegram — every message and file is routed through Telegram; see the Telegram privacy policy.
• Source platforms — the bot requests public media from the platform a posted link points to.
• Payment providers — process payments under their own PCI-DSS scope; receive only the data required for billing.
• Infrastructure providers — hosting, databases, storage and proxies, under data-processing agreements.

Shared media cache

A file downloaded for one group is stored in a cache shared across our bots (over 50 million files), so a link that has already been downloaded once is delivered to anyone who posts it, instantly and without a new download. The cache stores the file itself and the source URL, not who requested it.

Deleting your data

You can request access to, correction of, or deletion of your personal data at any time. Email support@madbots.dev with your Telegram user ID or the affected chat ID.

Legal bases

Where the GDPR or the UK GDPR applies to you, we process your data on these bases: performance of a contract (running the bot and your subscription), legitimate interests (keeping the Service secure, preventing abuse, improving it with aggregate statistics), consent (features you switch on yourself, such as AI processing or a connected account — you can withdraw it at any time by switching the feature off), and legal obligation (accounting and tax records).

How long we keep it

We keep data while your account uses it, and no longer than we need it:

• settings and configuration — until you delete them or delete your account;
• operational logs — pruned on a rolling basis;
• billing records — for as long as accounting and tax law requires, typically seven years;
• support correspondence — up to three years.

When we no longer need data, we delete it or make it anonymous.

Security

We use access control, encryption in transit, isolated infrastructure and least-privilege access for staff. Only the people who need it can reach production data. No service can promise perfect security, but we treat a breach as an incident: we investigate, fix and notify affected users and, where required, the competent authority.

International transfers

We and our providers operate in several countries, so your data may be processed outside the country where you live. Where data leaves the EEA or the UK, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses, and equivalent mechanisms elsewhere.

Your rights

Wherever you live, you can ask us to give you a copy of your data, correct it, delete it, restrict or object to its processing, or send it to another provider. You can withdraw consent at any time, without affecting what was done before.

Write to support@madbots.dev from the address you use with us, or message @madbots_support_bot with your Telegram user ID. We answer within 30 days. We never charge for this, and we never make the Service worse for you because you exercised a right.

If you are in the EEA, the UK or Switzerland, you may also complain to your local data-protection authority. If you are in the United States, the state privacy laws that apply to you may give you the rights above plus the right to opt out of "sale" or "sharing" of personal data — we do neither: we do not sell or share personal data, and we do not use it for targeted advertising.

Children

The Service is not directed at children under 13, and we do not knowingly collect their data. Telegram's own minimum age applies as well. If you believe a child has given us personal data, write to support@madbots.dev and we will delete it.

Cookies, local storage and tracking

Our websites carry no advertising and no cross-site tracking. They store one value in your browser — the language you chose — so the site opens in it next time. The mini app stores what it needs to keep you signed in inside Telegram.

Because we do not track visitors across sites, we do not respond to "Do Not Track" browser signals; there is nothing for them to switch off.

Changes to this policy

We update this policy when the Service or the law changes. The date at the top always shows the current version, and material changes are announced in the @madbots channel.

Contact

MADBOTS LIMITED, Unit 909, Prosperity Millennia Plaza, 663 King’s Road, Quarry Bay, Hong Kong. Privacy questions and deletion requests: support@madbots.dev.