Telegram Integration Privacy Policy

1. What Data We Collect

When an organization connects their Telegram bot to Oravio, the bot monitors groups it has been added to. From those groups we collect:

• Group membership events — who joined or left a group, and when.
• Activity patterns — message timestamps, message types (text, photo, etc.), and word counts.
• Message content — in a group the organization has switched monitoring on for, the text of each text message is stored — unless the organization has chosen to keep no message text — truncated to 4,096 characters, and kept for the retention period described in section 3. Messages that carry no text (photos, videos, documents, stickers, voice notes) leave a record of their type but no content. Messages that begin with a slash (bot commands) are not added to this record, and neither are private chats.
• User identifiers — Telegram user IDs and usernames, used to link activity to CRM contacts.
• Group metadata — group name, type (group / supergroup / channel), and member count.

We store message content only from groups the bot has been added to and the organization has switched monitoring on for. We do not store the content of private (one-to-one) chats with the bot.

2. How AI Summarization Works

Oravio uses AI to generate conversation summaries during natural conversation pauses (“lulls”). Here is how it works:

• While a conversation is active, its messages are also held in a short-lived buffer. That buffer is separate from the stored message content described above and expires 30 minutes after the last message.
• When a lull is detected (typically 10+ minutes of inactivity), the buffered messages are sent to our AI model for summarization.
• The AI produces a summary of topics discussed, participant counts, and potential intent signals (e.g., interest in a product, partnership inquiry).
• The buffer is deleted once it has been summarized, or once it expires. The stored message content is separate and follows the retention period in section 3.
• Summaries are associated with an organization and group, not individual users.

3. Data Retention

Oravio retains Telegram-related data according to the following policy:

• Message content is kept for the period the organization chooses — 7, 30, 90 or 365 days, or not kept at all if the organization chooses to keep no message text; 30 days where no choice has been made. A nightly job then erases the stored text. The record of the message — who sent it, when, in which group, its type and its word count — is kept after the text is erased and is not removed by that job.
• Conversation summaries are automatically archived after 12 months. Archived summaries are no longer displayed in the dashboard and are periodically purged.
• Activity metadata(timeline events, message logs) follows the organization's data retention settings.
• Group membership records are retained as long as the group is active. Records for inactive groups may be cleaned up after the organization disconnects the bot.

4. How to Opt Out

If you are a Telegram user and wish to opt out of Oravio monitoring:

• In-chat command: Send /optout in any group where the Oravio bot is present. This will dismiss your member records for that organization.
• Via API: Submit your Telegram user ID to our public opt-out endpoint at POST /api/v1/telegram/opt-out with the body { "telegramUserId": "YOUR_ID" }.
• Contact us: Email privacy@oravio.io with your Telegram username and we will process your opt-out request within 48 hours.

After opting out, your activity metadata will no longer be tracked and your member records will be marked as dismissed. Existing conversation summaries (which do not contain individual message content) will follow the standard 12-month archival policy.

5. Contact

For questions about this privacy policy or your data, please contact us at privacy@oravio.io.