Privacy Policy

For accounts, billing, the website and the security of the platform, the controller is KeepFlow L.L.C-FZ (Meydan Grandstand, 6th floor, Meydan Road, Nad Al Sheba, Dubai, U.A.E.) — the operator of Telm. For messages and member data processed inside a specific group, the group's owner decides why and how moderation is used; Telm processes this data on their behalf as configured. Organizations and business customers can request a data-processing agreement at support@telm.com.

What we collect depends on who you are. Group owners and dashboard users: your Telegram profile (ID, name, username, photo) when you sign in, groups you connect, settings, billing records and support messages. Group members: when a group protected by Telm receives a message, we process the full message content — text, media, voice notes (transcribed) and images (scanned for text) — to make a moderation decision, together with basic account signals (ID, username, join time, prior verdicts). Members do not need a Telm account. Affiliates and monetizing owners: payout details you provide (such as bank, PayPal or crypto wallet information). Website visitors: analytics and cookie data described in the Cookies section.

We use this data to run the service: detect spam and scams (including with AI models), execute moderation actions configured by admins, show analytics, process payments and payouts, prevent abuse of Telm itself, and provide support. We train our own moderation models on message data that has been anonymized first — usernames, phone numbers, emails and links are replaced with placeholders. We do not sell personal data and do not share it for third-party advertising.

Spam detection is layered. Most messages are decided by rules and our own models on our servers. Borderline cases are sent to a third-party AI provider (currently OpenAI) for classification; these requests contain the message content needed for the decision and are not used by the provider to train its models. Voice notes are transcribed to text for the same purpose and are not used for biometric identification. Our own models are trained only on anonymized data, as described above.

Moderation actions (deleting a message, muting or banning a member) can be taken automatically based on the group's settings. Every decision is recorded in the group's journal, admins can override any action, and affected members can appeal — appeals are reviewed and wrong decisions are reversed, restoring the member. This is the human-review path required for automated decision-making under laws such as the GDPR.

Data is stored on servers in the European Union, encrypted in transit and at rest. Retention follows fixed schedules: moderation records and message history are kept for the analytics window of the group's plan (7 to 365 days) and then deleted; account data is deleted within 30 days after account deletion; billing records are kept as long as tax law requires; security logs are kept up to 12 months. If we ever suffer a breach affecting personal data, we will notify the competent authority and affected users as required by law.

Our servers are in the European Union. Where a processor is outside the EEA/UK (for example, US-based AI or payment providers), transfers rely on recognized safeguards such as the EU Standard Contractual Clauses and the UK Addendum.

We share data only with processors needed to run the service, under data-processing agreements: — AI providers (currently OpenAI) receive message content for borderline-case classification; our contracts prohibit them from training their models on it; — payment providers (Stripe; Telegram for Stars payments; our crypto payment processor) process payment data — we never see full card numbers; — infrastructure and analytics providers (hosting in the EU, Google Analytics for the website). We disclose data to authorities only upon a legally binding request valid in our jurisdiction, and we notify affected users where the law allows. We will inform users of material changes to this list.

We use cookies and similar technologies to: - Keep you logged in - Remember your preferences - Understand how the site is used Analytics. We use Google Analytics 4 to understand how visitors use the site. It can set cookies (for example, _ga and _ga_*) that store a randomized identifier. These analytics cookies are only set after you accept them in our cookie banner — until then analytics runs in a cookieless mode. Analytics data is processed by Google and may be transferred to servers in the United States. You can decline analytics cookies in the banner at any time, and you can control or delete cookies through your browser settings. See Google's Privacy Policy (policies.google.com/privacy) for how Google processes this data.

You can access, correct, export or delete your data. Dashboard users can delete their account themselves; group members can request deletion of their moderation records via the group's admin or directly at support@telm.com. We answer verified requests within 30 days. EEA/UK users additionally have the rights under GDPR — including objection, restriction and the right to complain to their supervisory authority; users elsewhere have the rights granted by their local law. We honor Global Privacy Control signals for the website.

Telm is not directed at children. You must be at least 16 to create an account or use groups moderated by Telm, matching Telegram's own minimum age. We do not knowingly process children's data; if you believe we do, contact us and we will delete it.

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the 'Last updated' date. You are advised to review this Privacy Policy periodically for any changes.

If you have any questions about this Privacy Policy, please contact us at: Email: support@telm.com Telegram: @telmcom_bot