Privacy Policy
Last updated: February 25, 2026
1. Data We Collect
| Data | Purpose | Retention |
|---|
| Telegram User ID | Account identification | Until account deletion |
| Telegram Username | Display & logging | Until account deletion |
| Chat messages to bot | Processing website requests | Logs: 90 days |
| Voice messages | Transcription → site edits | Deleted immediately after transcription |
| Photos sent to bot | Image analysis → site creation | Deleted immediately after processing |
| Website files | Hosting your sites | Until site/account deletion |
| IP addresses | Site visitor analytics (optional) | Not stored by default |
2. How We Use Your Data
- Service delivery — Processing your requests and hosting your websites
- Content moderation — Checking requests against our Acceptable Use Policy
- Service improvement — Aggregated, anonymized usage statistics
- Security — Detecting abuse and unauthorized access
3. Third-Party Services
We use the following third-party services to process your data:
4. Data Storage & Security
- Data is stored on servers in the EU (DigitalOcean Frankfurt/Amsterdam).
- All connections are encrypted via TLS/SSL.
- Voice messages and photos are deleted immediately after processing.
- Database backups are encrypted.
5. Your Rights
Under GDPR Articles 15–21, you have the right to:
- Access (Art. 15) — Request a copy of all your data. Send
/export to @promptweb_bot to receive a ZIP archive containing your profile, all website files, and usage history.
- Erasure (Art. 17) — Delete your account and all data. Send
/deleteaccount to @promptweb_bot. After confirmation, a 7-day grace period begins. During this period you can cancel with /canceldelete. After 7 days, all data is permanently and irreversibly deleted, including your profile, all websites, site files, and usage history.
- Rectify (Art. 16) — Update your information by contacting us
- Portability (Art. 20) — Export your website files in standard formats via
/export
- Object (Art. 21) — Opt out of non-essential data processing
Note: If you have purchased a domain through our service (future feature), ICANN domain registration data is retained per ICANN policy and cannot be deleted upon request.
6. Data Retention
- Account data: retained until you delete your account via
/deleteaccount
- Website files: retained until you delete the site or account
- Request logs: 90 days, then automatically purged
- Error logs: 30 days
- Temporary files (voice, photos): deleted immediately after processing
- Deletion audit logs: retained for 1 year for security and compliance purposes
6a. Account Deletion Process
When you request account deletion via /deleteaccount:
- Grace period: 7 days from confirmation. You may cancel anytime with
/canceldelete.
- What is deleted: Your user profile, all websites, website files on disk, and all usage history records.
- What is NOT deleted: Anonymized aggregate statistics, audit logs of the deletion event, and any ICANN domain registration data (if applicable).
- Notification: You will receive a final confirmation message when deletion is complete.
- Re-registration: After deletion, you may create a new account at any time using
/start.
7. Children's Privacy
The Service is not intended for children under 13. We do not knowingly collect data from children under 13.
8. Changes to This Policy
We will notify users of material changes via the bot. Continued use after notification constitutes acceptance.
9. Contact
For privacy inquiries, contact us via @promptweb_bot on Telegram.
← Back to PromptWeb