Who we are

TheBotCreator operates the service and is the controller of account data. For the people who talk to your bots, you are the controller and we process their data on your behalf. Contact: support@thebotcreator.com.

What we collect about you

Your email address; a one-way hash of your password (never the password itself); your Google account id if you sign in with Google; your plan, subscription status and monthly usage counts.

Telegram bot tokens, your OpenAI API key and bot secrets, all stored encrypted and never shown back in full.

Your bot designs, versions, AI assistant prompts, and the media files you upload.

What your bots collect about their users

Telegram user id, name, username and language; the messages they send and the variables your flows store; conversation state; and daily usage statistics. Your bots should tell their users what they collect.

Why we use it

To run your bots and the editor, sign you in, enforce plan limits, send account and quota emails, bill subscriptions, prevent abuse, and fix problems. We do not sell personal data or use it for advertising.

Who processes it

Amazon Web Services (hosting, storage and email, in the Mumbai region); Telegram (message delivery); OpenAI (AI assistant prompts, and llm_generate steps with your own key); Google (optional sign-in); Dodo Payments (payments, as merchant of record — we never see your card).

How long we keep it

Account data is kept while your account exists. Conversation state expires 90 days after its last use, execution records after 30 days and statistics after about 13 months. Deleting a bot erases its users, history, statistics, media and secrets. Deleting your account erases your bots the same way and then your account. Backups roll off within 35 days.

Security

Data is encrypted in transit and at rest; tokens, keys and secrets are additionally encrypted with a key held in AWS Secrets Manager. Passwords are hashed with Argon2id.

Your rights

You can see and edit your data in the app, delete your bots and your account, and ask us at support@thebotcreator.com for a copy or correction of your data. Bot users should contact the bot's owner, who can block or remove them from the Audience tab.

Cookies and local storage

We use no advertising or tracking cookies. The editor keeps your sign-in tokens in your browser's local storage, which signing out clears.

Changes

We will post changes here and email you about material ones.