Who is responsible
This policy explains how the TeleAgent service (the website teleagent.monster and the application app.teleagent.monster) processes personal data.
Information required from TeleAgent
Legal name, legal form and registered address of the company operating TeleAgent, and the contact address for privacy requests (and a data protection officer or representative, if one is required).
Your data and your contacts’ data
TeleAgent processes two kinds of data. Data about you and your team (your TeleAgent account) is processed by TeleAgent to provide the service. Data that comes from the Telegram accounts you connect — messages, contacts and chats of the people you talk to — is processed on your instructions, because you decide which accounts to connect and how they are used.
You are responsible for having a lawful basis to process your contacts’ data with TeleAgent and for informing them where the law requires it.
Information required from TeleAgent
Confirm the roles under the applicable data protection law (for example controller / processor) and whether a data processing agreement is offered to customers.
What data we process
Your TeleAgent account:
- name, e-mail address and password (the password is handled by our authentication provider and is never visible to TeleAgent staff);
- workspace name, preferred language, team members and their roles (owner, admin, operator, member);
- licence status, licence period and the number of Telegram accounts the licence allows.
Connected Telegram accounts:
- the phone number used to sign in, the Telegram user id and the Telegram display name;
- the login code and, if enabled, the Telegram two-step verification password — used only to complete the login and not stored;
- the resulting Telegram session, stored only on our servers and only in encrypted form (AES-256-GCM); it is never sent to your browser;
- optional proxy settings (type, host, port, username); a proxy password is stored encrypted.
Conversations and work data:
- private conversations synchronised from your connected accounts: message text, sender, time and the contact’s Telegram name, username and phone number where Telegram provides them;
- attachments as metadata only (type, file name, size, duration, dimensions). Files stay in Telegram and are fetched through your account only when someone opens them; they are not stored by TeleAgent;
- leads, pipeline status, assigned operator and notes;
- personas, knowledge base entries, assigned groups and activity schedules you configure.
Technical data:
- audit records of important actions (who did what and when, with ids — never message text);
- AI usage records (time, purpose and token counts — never prompts or replies);
- server logs with ids, counts, error codes and durations. Logs are filtered so that message text, phone numbers, e-mail addresses, passwords and secrets are not written;
- network data such as IP addresses processed by our hosting provider to deliver and protect the service.
Why we process it
- to create and secure your account and workspace, and to check your licence;
- to connect your Telegram accounts and keep them signed in without asking for new codes;
- to show conversations in the Inbox, send the replies you or your team write, and run the AI features you switch on;
- to enforce limits that protect your accounts and the service (rate limits, pauses, Telegram flood-wait cooldowns);
- to keep the service reliable and secure, investigate errors and prevent abuse.
Information required from TeleAgent
The legal basis for each purpose under the applicable law (for example performance of a contract, legitimate interests, consent).
AI processing
AI features are optional and are switched on per conversation or per account. Every conversation starts in Human mode, where the AI never sends anything.
When an AI feature is used — a suggestion in Assist mode, an automatic reply in AI mode, a persona test, the setup assistant or group participation — the text needed for that answer is sent to our AI provider DeepSeek: recent messages of that conversation, the persona and the relevant knowledge base entries. Files are never sent; the AI only receives a label such as “[photo]” and the caption.
AI replies are generated by a model and can be wrong. The AI never starts a conversation on its own and never sends messages to people who have not written first.
We store only metadata about AI requests (time, purpose, token counts), not the prompts or the replies themselves, except where an AI reply is sent and therefore becomes part of the conversation.
Service providers
We use the following providers to run TeleAgent:
- Supabase — database and user authentication;
- Vercel — hosting of the website and the application;
- DeepSeek — AI model used for suggestions and replies;
- Telegram — the messaging network your connected accounts use. Messages sent through Telegram are also subject to Telegram’s own terms and privacy policy.
We do not sell personal data and do not use it for advertising.
Information required from TeleAgent
Confirm the complete provider list (including the e-mail service that sends sign-up and password e-mails), each provider’s processing location, and the safeguards used for international data transfers.
How we protect data
- Telegram sessions and proxy passwords are encrypted with AES-256-GCM and are only decrypted on the server when needed;
- every workspace is isolated in the database, and every request is checked for sign-in, membership, role and licence;
- connections use HTTPS; server logs exclude message text and secrets;
- automation is rate-limited and paused accounts never act automatically.
How long we keep data
Some operational records are deleted automatically: manual-send records after 30 days, finished automation run records after 180 days and AI usage records after 400 days.
Disconnecting a Telegram account logs it out of Telegram (where Telegram can be reached) and deletes its stored session. Conversations already synchronised remain in your workspace.
Information required from TeleAgent
How long account data, conversations, leads and backups are kept while a licence is active and after it ends or the account is closed, and how customers request deletion.
Your rights
Depending on where you live, you may have the right to access, correct or delete your personal data, to object to or restrict its processing, to data portability and to complain to a supervisory authority.
Information required from TeleAgent
The applicable law, how and where to send requests, the response time and the competent supervisory authority.
Business use only
TeleAgent is a tool for businesses and professionals and is not intended for children.
Information required from TeleAgent
The minimum age for creating an account.
Changes to this policy
We will update this policy when the service or the law changes and will publish the new version on this page.
Information required from TeleAgent
The effective date of the final version and how customers are informed about material changes.