Privacy Policy
Last updated: November 12, 2026
Maglead turns a business's Telegram bot into a support desk. This policy explains what we store, why, and for how long.
In short, we never store the text of conversations between businesses and their customers.
Who we are
Maglead is a service in Uzbekistan. You can reach us through Maglead Support in Telegram, @maglead_bot.
What we store
About business owners and operators
- Telegram user ID, name and language
- The bots they connect, with each bot token encrypted with AES-256
- Their plan, trial and payment status
- Settings they write themselves, such as the welcome message and quick replies
About customers who write to a connected bot
- Telegram user ID, name, username and language, as Telegram provides them
- A short number used by the team, such as #42
- Which operator a customer is assigned to, and when they last wrote
- Message identifiers that link a customer's message to its copy in the team's chat
What we do not store
We do not store the text, photos, files or any other content of messages between customers and businesses. Messages are passed through Telegram from one chat to another, and only their identifiers are kept so replies reach the right person.
Why we store it
- To deliver customer messages to the right team members and replies back to the right customer
- To apply plan limits and run the free trial
- To show counts such as the number of messages per day
- To prevent abuse and keep the service secure
We do not sell data and do not use it for advertising.
How long we keep it
- Message identifiers are deleted after 180 days
- When a bot is disconnected, everything about it, including its token and its customers, is deleted after 30 days
- Invite links are deleted a day after they are used or expire
- Account data is kept while the account exists. Send /deleteaccount to @magleadbot to delete it, with all your bots and their data, right away
Who processes it
- Telegram, which carries every message
- Our hosting provider, where the database runs
- Sentry, which receives error reports without message content
- Our payment provider, when payments are enabled, which handles card details. We never see or store card numbers.
Security
Bot tokens are encrypted, each bot's webhook is protected by its own secret, and only signed requests from Telegram are accepted. The database is not reachable from the internet. Daily backups are kept for 14 days.
Your rights
You can ask us for a copy of your data, to correct it, or to delete it. Customers of a business can make the same request through the business or directly to us. Write to @maglead_bot in Telegram. We answer within 30 days.
A business that connects a bot is responsible for informing its own customers that it uses Maglead to answer them.
Changes
If this policy changes in a meaningful way, we will tell business owners through @magleadbot before the change takes effect.