Your Telegram stays yours.

01Who we are

telegrime is a Telegram CRM for business development and community teams, run by its founders. Questions, requests or complaints about this policy: hello@telegrime.com or @spacevii on Telegram. Every connection to telegrime.com and the app uses HTTPS (encrypted in transit).

02This website (telegrime.com)

• The only personal data collected here is what you type into our forms. The pilot form on the home page asks for your email. The plan-request form on the pricing page asks for your email, the plan you are interested in, and optionally your Telegram handle and your community or company name. Both are stored with our forms provider (Netlify) and used solely to contact you about telegrime.
• No analytics scripts, no advertising trackers, no cookies.
• Want your details removed? One message to the contact above and they are gone.

03The public demo (demo.telegrime.com)

• The demo runs entirely on fictional sample data. Every person, group and message in it is invented.
• There is no login and we collect no personal data from you there, with one exception: if you use the feedback form, we store what you type. The demo resets itself periodically.

04The hosted app (app.telegrime.com)

The hosted app is one service that many people use, and each person's workspace is a separate, encrypted vault inside it. Your vault is encrypted with a key that only your browser and a one-time recovery code can unlock; we cannot open it, and no workspace can read another. Nothing is pooled across users. app.telegrime.com is open to anyone with a Telegram account, with no access code. A separate invite-only instance, beta.telegrime.com, runs the same software for invited testers behind an access code.

• Telegram sign-in: logging in creates a standard Telegram device session, exactly like signing into Telegram Desktop on a new laptop. You can see it, and revoke it, at any time in Telegram → Settings → Devices. If you use two-step verification, your cloud password passes straight through to Telegram's servers and is never stored, logged or seen by us.
• What your vault stores: the session credential, an index of your chats (names, unread counts, last-message snippets), the contacts, notes, tags, pipeline stages, lists, templates, campaigns and events you create in the app, cached profile photos, any AI API keys you enter, and any feedback you send.
• Where it lives and how it is protected: encrypted at rest in your own vault on the service's storage volume, hosted on Railway's cloud infrastructure. The volume holds ciphertext only. The vault key is held by your browser while you are signed in, and a one-time recovery code (shown once, when you set up) can unlock it on a new device. We keep neither, so we cannot recover your data if you lose both. Railway states that it is SOC 2 Type II certified; that is Railway's certification of its own infrastructure, not a certification of telegrime.
• AI features: when you press an AI feature, the content it needs is sent to the AI provider (Anthropic, or OpenAI if you add an OpenAI key) to generate the output. Summaries and reply drafts send recent messages from that chat. The events and signals scans send up to 40 recent messages from each group they read. Auto-tag sends your contacts' names, usernames and notes. HubSpot mapping sends senders' first names. If you have not added a key of your own, these requests run through telegrime's own Anthropic account under a monthly allowance with a spending limit; add your own key in Settings and they run through your account instead. Nothing is sent unless you trigger a feature, and per those providers' API terms it is not used to train their models.
• Messages you send: replies and broadcasts go out through your own Telegram account. You are responsible for using them in line with Telegram's terms of service; bulk messaging people who have not consented can get your Telegram account limited by Telegram.
• Cookies: four, all functional: one that routes requests to your workspace, one that holds your vault key while you are signed in, one that carries a login in progress, and a short-lived one minted at login for the fresh-start flow. On beta.telegrime.com a further one remembers the access code. No tracking or analytics cookies.
• Retention and deletion: your data stays until you remove it. Settings → Delete all my data wipes your vault's database, files and session, and revokes the Telegram device session server-side, in one click, no need to ask us. Revoking the session from Telegram → Settings → Devices also cuts the app's access instantly.

05Payments (paid plans)

• Payments for paid plans are processed by Paddle, which acts as the merchant of record. Paddle collects and holds your billing details (name, email, address and payment method) and handles receipts and sales tax or VAT. It does this under its own privacy policy: paddle.com/legal/privacy. We never see or store your card details.
• What telegrime keeps for billing is limited to a pseudonymous account id, your plan, your subscription status, and the Paddle customer and subscription ids that link your account to Paddle.
• The free plan needs no payment details. Questions about a charge or a receipt can go to us or to Paddle.

06What we never do

• Sell or rent your data. To anyone. Ever.
• Pool or cross-reference data between users' vaults.
• Read your chats for any purpose other than the feature you invoked.
• Run advertising or third-party analytics on any telegrime surface.

07Your rights

Wherever you are, we treat GDPR as the baseline: you can access, export or erase your data. Deletion is self-serve inside the app. For billing data held by Paddle, you can also use the rights described in Paddle's privacy policy. For anything else, or for questions, message hello@telegrime.com or @spacevii on Telegram and we'll respond within 30 days. If you're in the EU/UK you also have the right to complain to your data-protection authority.

08Changes

If this policy changes materially we'll note it here with a new effective date. Continued use after a change means acceptance.