At VibeNotes, we believe your authentic voice is your superpower, and your data belongs to you.
This Privacy Policy explains how we collect, use, and protect your information when you use our
Telegram bot service to extract and format your thoughts into social media content.
Key Promise: We never train AI models on your content. Your thoughts remain yours.
1. Information We Collect
Information You Provide Through Telegram
Messages: Text messages, voice notes, images, and links you send to our bot
Commands: Bot commands you use (like /idea, /start, /export)
User Profile: Your Telegram user ID, username, first name, and language preference (provided by Telegram)
Information Collected Automatically
Usage Data: Commands used, message timestamps, and interaction patterns
Technical Data: IP address (for security and rate limiting)
Session Data: Temporary session information for conversation context
Analytics Data: Usage statistics via Cloudflare Analytics and Google Analytics
Information We Do NOT Collect
Phone numbers (unless you explicitly share them in messages)
Payment information (all payments handled through Telegram)
Location data
Contacts or address book
2. How We Use Your Information
Primary Uses
Content Extraction: Process your messages to extract and format content
AI Processing: Send your content to Google Gemini AI for formatting (never for training)
Service Delivery: Respond to your commands and provide formatted content
Scheduling: Store formatted content for scheduled posting if requested
Secondary Uses
Service Improvement: Analyze usage patterns to improve features
Support: Respond to your support requests
Security: Prevent abuse and ensure platform security
3. Data Storage and Security
Where We Store Your Data
Primary Storage: Cloudflare Workers and D1 Database (encrypted at rest)
Temporary Processing: Cloudflare Queues for message processing
No Long-term Archives: We don't maintain permanent archives of your messages
How We Protect Your Data
End-to-end encryption for data in transit
Encryption at rest in Cloudflare infrastructure
Rate limiting and DDoS protection
Regular security audits
Secure webhook verification for Telegram communications
Data Retention
Message Content: Retained indefinitely unless you request deletion
Formatted Content: Retained indefinitely unless you request deletion
Account Data: Retained while your account is active
Deleted Data: Permanently removed immediately when you use /clear command
Export Option: Use /export command to download all your data before deletion
When you explicitly request it (e.g., posting to social media)
To comply with legal obligations
To protect rights, safety, and security
With your explicit consent
7. International Data Transfers
Your data may be processed in multiple countries where Cloudflare and Google operate.
We ensure appropriate safeguards are in place for international transfers, including
standard contractual clauses and adequacy decisions.
8. Children's Privacy
VibeNotes follows Telegram's age requirements. Users must meet the minimum age requirement
to use Telegram in their country (typically 13-16 years old). We do not knowingly collect
personal information from children below these age limits. If we discover we have collected
information from an underage user, we will delete it immediately.
9. California Privacy Rights (CCPA)
California residents have additional rights under the CCPA, including the right to know
what personal information is collected, used, shared, or sold. We do not sell personal
information. To exercise your CCPA rights, contact us using the information below.
10. European Privacy Rights (GDPR)
If you're in the European Economic Area (EEA), you have additional rights under GDPR,
including the right to object to processing, right to restriction, and right to lodge
a complaint with supervisory authorities. Our legal basis for processing is legitimate
interest and consent where applicable.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material
changes through the Telegram bot or by email if provided. Your continued use of the
service after changes constitutes acceptance of the updated policy.