Privacy notice — Telegram assistant

Who is responsible

Aleksei Papushin, sole trader (ENI) registered in Portugal, is the data controller. Contact: [email protected].

What we store

• Your Telegram name, username, user ID and language.
• The messages you send to the bot and the replies you receive.
• Notes about your request that the assistant collects during the conversation: company, role, the problem, its scale, the timeline and, if you mention it, the budget.
• Which page of papushin.com you came from.

We do not store the content of files or photos you send. Aleksei can see them in Telegram, but the assistant does not read them.

Why

To answer your questions, to understand whether and how Aleksei can help, and to prepare a proposal if you ask for one. The legal basis is steps taken at your request before a possible contract, and our legitimate interest in replying to enquiries (GDPR Art. 6(1)(b) and (f)).

Automated replies

The first replies are written by an AI assistant. Aleksei reads every conversation, replies in the same chat and can take over at any time. No decision with legal or similar effect is made automatically.

Who else processes it

• Telegram delivers the messages; your relationship with Telegram is governed by Telegram's own policy.
• An AI model provider in the USA generates the assistant's replies. The conversation and the request notes are sent to its API for each reply, under commercial API terms: the provider does not use this data to train its models and deletes it within 30 days, unless it has to keep it longer to investigate misuse or by law.
• Hosting providers run the bot and its database in the EU; the encrypted backups are kept with a provider in the USA.

Where a provider processes data outside the EU, the transfer relies on the EU–US Data Privacy Framework or standard contractual clauses. The full list of providers is available on request.

How long

12 months after the last message in the conversation, then everything is deleted. Encrypted backups roll over within 14 days. Technical logs contain no message content and are kept for 180 days.

Your rights

Send /forget to the bot to delete your conversation and request notes immediately; the copy in backups disappears within 14 days. You can also ask for access, correction, a copy of your data or object to processing at [email protected]. You can complain to the Portuguese data protection authority, CNPD (cnpd.pt).