Legal
Privacy Policy
Last updated: 11 November 2026
[Company legal name] (“we”, “us”) runs chatbots for its own brands on Facebook Pages in Messenger and in Telegram, using Sendly, our own chatbot platform. This policy explains what personal data we collect when you talk to these bots or visit this website, why we use it, who we share it with and what your rights are.
1. Who we are
The controller of your personal data is [Company legal name], registration no. [Registration number], [Street, building, city, postcode], [Country].
For anything about your data, write to [[email protected]].
2. What we collect
When you message us in Messenger or Telegram
- Your profile as the platform shares it with us: the ID the platform gives you for our Page or bot, your first and last name and your profile photo. Telegram also shares your username, the language of your app and whether you have Telegram Premium.
- Our conversation: the messages and files you send us and the messages we send you, with the time of each. In Messenger we also see when you have read our messages.
- Answers you choose to give, for example your phone number or email address when our assistant asks for them.
- How you reached us and what you open: the link or ad you used to start the chat, and which buttons and links in our messages you press.
- Whether you are subscribed to our messages or have blocked the bot.
- Promotions: if a bot gives out promo codes or bonuses, which code was issued to you and when, so that each offer goes to each person once.
- Partner links: when you open a link to a partner’s website from our messages, we add a random identifier to it. If you then sign up or buy something there, the partner may report this back to us with that identifier.
We do not ask for sensitive data such as health information. Please do not send it in the chat.
When you work with Sendly as a member of our team
Your name, email address, role and sign-in sessions, and what you do in Sendly, such as the replies you send in chats. We use this to give you access, keep the system secure and know who answered whom (our legitimate interest and our contract with you).
When you visit this website
This website uses no cookies, analytics or tracking pixels, and loads nothing from other companies. Like any web server, ours keeps short-lived technical logs (IP address, browser, pages requested and time) to keep the site secure and working.
3. Why we use it
| What we do | Legal basis (GDPR) |
|---|---|
| Reply to your messages and requests, and pass the conversation to a member of our team when you ask for a person. | Performing a contract with you or taking steps you asked for before one (Art. 6(1)(b)). |
| Send you news and offers you have agreed to receive. | Your consent (Art. 6(1)(a)). You can withdraw it at any time by blocking the bot. |
| Understand which links and ads bring people to us and which messages are useful, including results reported by partners. | Our legitimate interest in running and improving our service (Art. 6(1)(f)). |
| Protect our bots from spam, abuse and automated sign-ups. | Our legitimate interest in keeping our service secure (Art. 6(1)(f)). |
| Meet legal obligations and establish or defend legal claims. | Legal obligation (Art. 6(1)(c)) and our legitimate interests (Art. 6(1)(f)). |
We do not sell your personal data and do not use it for advertising outside our own chats.
4. Automated replies and checks
Our assistant replies automatically, following scripts written by our team. You can ask for a person at any point.
To protect our bots, we may automatically limit access when an account shows signs of automated or fraudulent sign-ups, for example by its app language or the way it joined. These checks do not have legal or similarly significant effects on you. If you think a check got it wrong, write to us and a person will look at it.
Some of our bots translate their own messages into your language automatically. When they do, the text of our message, which may include your first name, is sent to Google’s translation service. Your own messages are not sent for translation.
5. Who we share it with
- Meta Platforms and Telegram, which deliver our messages. They process data under their own policies: Meta Privacy Policy, Telegram Privacy Policy.
- Our hosting provider, which stores our systems and data on our behalf.
- Google, for the automatic translation described above.
- Members of our team who answer chats. They are bound by confidentiality.
- Partners whose websites you open from our messages. They receive only the random identifier in the link, not your name or your messenger profile.
- Authorities, when the law requires us to.
6. International transfers
Meta, Telegram, Google and our providers may process data outside your country, including outside the European Economic Area. Where we transfer personal data outside the EEA, we rely on the safeguards the law requires, such as the European Commission’s Standard Contractual Clauses.
7. How long we keep it
- Your profile, our conversation and your answers: while you stay in contact with us. If you do not message us for 24 months, we delete them. If you ask, we delete them sooner (see Deleting your data).
- Website logs: for a short time, only as long as needed for security.
- Anything the law requires us to keep: for as long as the law requires.
8. Your rights
You have the right to:
- get a copy of the personal data we hold about you;
- have inaccurate data corrected;
- have your data deleted;
- restrict how we use your data;
- object to our use of your data based on legitimate interests, and to direct marketing at any time;
- receive your data in a portable format;
- withdraw your consent at any time, without affecting what we did before;
- complain to the data protection authority in your country.
To use any of these rights, write to [[email protected]] or message us in the chat. We reply within one month. To make sure nobody else gets or deletes your data, we may ask you to confirm the request from the same Messenger or Telegram account.
9. Deleting your data
You can ask us to delete your data at any time, free of charge. The steps are on the Delete your data page.
10. Children
Our bots and this website are not meant for anyone under 18, and we do not knowingly collect data from them. If you think a child has given us personal data, write to us and we will delete it.
11. Security
Only authorised members of our team, each with a personal account, can access our systems. Data travels over encrypted connections, and the access keys to our bots are stored encrypted.
12. Changes to this policy
When we change this policy, we update this page and the date at the top. If a change matters for how we use your data, we will let you know in the chat.
13. Contact us
[Company legal name]
[Street, building, city, postcode], [Country]
[[email protected]]