Privacy Policy

Definitions

For purposes of this Privacy Policy:

• "Telegram" means Telegram Messenger Inc. and the Telegram messaging platform.
• "Service" means the SRB Telegram bot, Telegram Mini App, website, APIs, bridge infrastructure, and related functionality.
• "User," "you," or "your" means an individual who accesses or uses the Service.
• "Personal Data" means information that identifies, relates to, describes, or could reasonably be associated with an identifiable individual.
• "Content" means messages, media, captions, files, links, or other material transmitted through Telegram or processed by the Service.

Scope and Relationship with Telegram

The Service operates through and in connection with Telegram. Telegram may independently collect and process information about you in accordance with its own policies and terms.

Telegram controls the operation of its own platform, applications, accounts, servers, and infrastructure. SRB does not control Telegram's processing of data and is not responsible for Telegram's privacy practices.

You should review:

• Telegram Privacy Policy
• Telegram Bot Terms
• Telegram Mini App Terms

Where Telegram makes information available to SRB through its platform or APIs, SRB processes that information in accordance with this Privacy Policy and applicable law.

Information We Collect

We seek to collect and process only the information reasonably necessary to operate, secure, maintain, and improve the Service.

3.1 Information Received from Telegram

Depending on how you use the Service, Telegram may make certain information available to SRB, which may include:

• Telegram user ID;
• Telegram username, first name, last name, language, or other public profile information;
• chat, channel, group, source, and target identifiers;
• information required to authenticate a Telegram Mini App session;
• information contained in commands, interactions, or requests sent to the SRB bot;
• information necessary to determine whether you have access to a particular feature.

The exact information available to SRB depends on the Telegram functionality you use, the permissions you grant, and the information Telegram makes available to third-party bots and Mini Apps.

3.2 Configuration and Service Data

When you configure or use SRB, we may process:

• source and target Telegram identifiers;
• route and repost configuration;
• selected reposting mode or feature settings;
• task status and queue metadata;
• timestamps;
• delivery status;
• retry and failure information;
• sanitized diagnostic categories and codes;
• usage, entitlement, or subscription-related status, where applicable;
• administrative permissions and feature capabilities;
• information necessary to respond to support or privacy requests.

3.3 Content Processed for Reposting

SRB may temporarily access or process Telegram messages, media, captions, links, and related metadata when this is necessary to perform a reposting or delivery operation that you have configured or requested.

SRB is designed to minimize the retention of Content. Unless otherwise expressly stated in this Privacy Policy or required for a specific Service feature, SRB does not intentionally retain message text, captions, media payloads, raw Telegram objects, or other message Content as a permanent user record.

Temporary technical processing may nevertheless be necessary to receive, transform, queue, deliver, retry, or confirm an operation.

3.4 Information You Provide Directly

You may provide information when you:

• configure routes or Service settings;
• contact us;
• submit a privacy, access, deletion, or support request;
• provide information necessary to resolve a technical issue;
• use a billing or subscription feature, where applicable.

Please do not provide sensitive personal information unless it is strictly necessary for your request.

3.5 Technical and Security Information

We may process limited technical information necessary to operate and secure the Service, including:

• timestamps;
• request identifiers;
• authentication and authorization metadata;
• service status information;
• rate-limit and abuse-prevention information;
• security event data;
• error categories and sanitized diagnostic information.

We do not intentionally retain raw secrets, authentication signatures, private keys, raw exception traces, or other sensitive internal security material in user-facing records.

3.6 Cookies and Similar Technologies

The Service may use cookies, local storage, session storage, or similar technologies where reasonably necessary to:

• maintain a secure session;
• support authentication;
• preserve functional preferences;
• protect the Service against abuse;
• measure or improve Service performance.

We will not use non-essential tracking technologies where prohibited by applicable law without obtaining any consent required by law.

You may be able to control cookies and similar technologies through your browser or device settings. Disabling strictly necessary technologies may affect the availability or functionality of the Service.

Purposes of Processing

We may process Personal Data for the following purposes:

1. providing and operating the Service;
2. authenticating Telegram Mini App sessions and user requests;
3. creating and managing reposting routes and configurations;
4. queueing, delivering, retrying, and monitoring reposting operations;
5. providing delivery history, diagnostics, analytics, and route-health information;
6. administering user entitlements, subscriptions, or feature access, where applicable;
7. preventing abuse, fraud, unauthorized access, and security incidents;
8. troubleshooting and maintaining the Service;
9. responding to support, privacy, and legal requests;
10. complying with applicable laws, regulations, court orders, and lawful governmental requests;
11. enforcing our terms, protecting our rights, and defending legal claims;
12. improving the reliability, security, and functionality of the Service.

We do not use Personal Data for purposes unrelated to the Service unless we provide notice and obtain consent where required by applicable law.

Legal Bases for Processing

Where applicable data-protection law requires a legal basis, we may rely on one or more of the following:

• Performance of a contract: to provide the Service you request and administer your account or configuration;
• Legitimate interests: to secure, maintain, troubleshoot, improve, and prevent abuse of the Service, provided that those interests are not overridden by your rights and freedoms;
• Consent: where consent is required or where we choose to rely on consent;
• Legal obligations: to comply with applicable law, legal process, and regulatory requirements;
• Establishment, exercise, or defense of legal claims: where necessary to protect our legal rights or respond to disputes.

Where processing is based on consent, you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

Data Minimization and Privacy by Design

SRB is designed to minimize the amount of Personal Data processed and retained.

Our privacy principles include:

• processing only data reasonably necessary for the relevant Service function;
• limiting the retention of operational history and diagnostics;
• avoiding permanent storage of message Content where it is not required;
• using sanitized categories and metadata instead of raw technical errors;
• limiting access to Personal Data according to operational necessity;
• avoiding the disclosure of internal infrastructure details, secrets, raw queue data, or raw bridge-worker information;
• separating user-facing Service data from internal operational information.

No method of transmission or storage is completely secure. We cannot guarantee absolute security.

Retention

We retain Personal Data only for as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer period is required or permitted by law.

Retention periods may depend on:

• the type and sensitivity of the information;
• the purpose for which it was collected;
• whether the information is needed to provide the Service;
• security, fraud-prevention, and troubleshooting requirements;
• legal, accounting, tax, or dispute-related obligations;
• the status of your account or configuration.

Operational history and delivery diagnostics may be subject to bounded retention periods and automatic deletion or replacement. Certain configuration data may be retained while it is needed to provide the Service or until you delete or change it.

When Personal Data is no longer required, we will delete it, anonymize it, or securely isolate it, subject to technical feasibility and applicable legal requirements.

Sharing and Disclosure

We do not sell Personal Data. We may disclose limited Personal Data in the following circumstances:

8.1 Telegram and User-Requested Destinations

The Service may transmit information to Telegram or to Telegram chats, channels, groups, or other destinations selected or authorized by you as part of the reposting functionality.

The contents and visibility of information sent to a destination may be controlled by Telegram, the destination's administrators, and the users who can access that destination.

You are responsible for ensuring that you have the necessary rights, permissions, and lawful basis to copy or repost Content to any destination.

8.2 Service Providers

We may use carefully selected service providers to host, operate, secure, monitor, maintain, or support portions of the Service. Such providers may process Personal Data only as necessary to provide services to us and subject to appropriate contractual or legal protections.

Depending on the Service configuration, these providers may include hosting, infrastructure, database, caching, security, communications, analytics, payment, or customer-support providers.

We do not authorize service providers to use Personal Data for their own unrelated purposes.

8.3 Legal and Safety Disclosures

We may disclose information where reasonably necessary to:

• comply with applicable law or valid legal process;
• respond to lawful requests from governmental authorities;
• protect the rights, safety, property, or security of users, SRB, Telegram, or others;
• investigate fraud, abuse, unauthorized access, or security incidents;
• enforce agreements or defend legal claims.

Where legally permitted, we will seek to limit disclosures to the information reasonably necessary for the relevant purpose.

8.4 Business Transfers

If SRB or substantially all of its assets are involved in a merger, acquisition, reorganization, financing, sale, bankruptcy, or similar transaction, Personal Data may be transferred as part of that transaction, subject to applicable law and appropriate protections.

We will not disclose Personal Data to third parties for their independent direct-marketing purposes without providing any notice and choice required by applicable law.

International Data Transfers

SRB and its service providers may process and store information in countries other than the country in which you reside.

Those countries may have data-protection laws that differ from the laws of your country. Where required by applicable law, we will use appropriate safeguards for international transfers, such as contractual protections, adequacy mechanisms, consent, or another legally recognized transfer mechanism.

Your Rights and Choices

Depending on your location and applicable law, you may have the right to:

• request access to Personal Data we hold about you;
• request correction of inaccurate or incomplete Personal Data;
• request deletion of Personal Data;
• request restriction of processing;
• object to certain processing;
• withdraw consent where processing is based on consent;
• request portability of certain Personal Data;
• opt out of certain forms of sale, sharing, targeted advertising, or profiling where applicable;
• appeal a decision concerning your privacy request;
• lodge a complaint with a competent data-protection authority.

These rights are subject to applicable legal exceptions. For example, we may retain limited information where necessary to comply with a legal obligation, prevent fraud or abuse, protect security, resolve disputes, or establish, exercise, or defend legal claims.

To submit a request, contact us using the details in Section 15. We may request information reasonably necessary to verify your identity and protect against unauthorized access. We will not require you to provide more information than reasonably necessary for verification.

We generally aim to respond to verified requests within the time period required by applicable law. Where applicable law permits an extension, we may take additional time and will provide an explanation.

California Privacy Rights

If you are a California resident, California law may provide additional rights, including rights to know, delete, correct, limit the use of certain sensitive Personal Information, and opt out of certain types of sale or sharing.

SRB does not sell Personal Data for monetary consideration. SRB does not knowingly share Personal Data for cross-context behavioral advertising unless this Privacy Policy is updated to describe such processing and any required consent or opt-out mechanism is provided.

To exercise applicable California rights, contact us using the details in Section 15. We will not discriminate against you for exercising rights provided by applicable law.

Children's Privacy

The Service is not directed to children under the age at which they may lawfully consent to the processing of Personal Data in their jurisdiction.

We do not knowingly collect Personal Data from children in violation of applicable law. If you believe that a child has provided Personal Data to us, please contact us so that we can evaluate and, where appropriate, delete the information.

You are responsible for using the Service only if you are legally permitted to do so under applicable law, Telegram's terms, and any applicable age requirements.

User Responsibilities and Third-Party Content

You are responsible for:

• providing accurate information when interacting with the Service;
• maintaining the security of your Telegram account;
• ensuring that you have the necessary rights and permissions to repost Content;
• complying with applicable law and Telegram's terms;
• ensuring that Content sent through the Service does not violate the rights of others;
• selecting lawful and appropriate source and target destinations.

SRB does not claim ownership of Content transmitted through the Service. You retain responsibility for Content that you submit, configure, transmit, or cause to be reposted.

Content made public by you or made available to other Telegram users may be accessed, copied, or further distributed by those users. Information that you voluntarily make public may not be protected as private information under this Privacy Policy.

Security

We maintain reasonable administrative, technical, and organizational safeguards designed to protect Personal Data against unauthorized access, alteration, disclosure, loss, misuse, or destruction.

Security measures may include access controls, authentication controls, environment separation, data minimization, bounded retention, monitoring, and sanitized operational diagnostics.

However, no service, transmission method, or storage system can be guaranteed to be completely secure. You should use appropriate security practices, including protecting your Telegram account and not sharing authentication codes, passwords, or other credentials.

If we determine that a security incident affects Personal Data, we will provide notices required by applicable law.

Contact Us

For privacy questions, data-subject requests, or complaints concerning this Privacy Policy, contact:

Website: superreposter.bot

Please include enough information for us to understand and verify your request. Do not include unnecessary sensitive information in your initial message.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in the Service, applicable law, technology, security practices, or our processing activities.

When we make material changes, we will provide notice in a manner reasonably appropriate to the circumstances, such as by publishing the revised Privacy Policy on the website, within the Telegram Mini App, or through another appropriate Service channel.

The "Last Updated" date at the beginning of this Privacy Policy indicates when the current version became effective. Your continued use of the Service after the effective date of an updated Privacy Policy constitutes acceptance of the revised Privacy Policy to the extent permitted by law.

No Override of Telegram Terms

This Privacy Policy does not replace, modify, or override Telegram's Privacy Policy, Telegram Bot Terms, Telegram Mini App Terms, or other applicable Telegram terms.

If there is a conflict between this Privacy Policy and Telegram's terms concerning Telegram's own services or processing activities, Telegram's terms will govern those matters.

Governing Legal Requirements

This Privacy Policy is intended to operate together with applicable privacy, data-protection, consumer-protection, communications, cybersecurity, and electronic-commerce laws.

No provision of this Privacy Policy limits any mandatory right or protection that cannot lawfully be waived or restricted under applicable law.