Privacy Policy

TeleAuto (“we”, “us”) operates teleauto.com, a WhatsApp & Telegram automation platform. This policy explains how we handle personal data when you use our website, dashboard, and APIs. For questions or requests, contact support@teleauto.com.

Account data — email address, hashed password (bcrypt), name if provided, and OAuth profile info when you sign in with Google or GitHub.

Session data — encrypted WhatsApp and Telegram session credentials, connected phone numbers, device names, and connection status. Session credentials are encrypted with AES-256 at rest and are used solely to keep your sessions connected.

Synced chat data — contacts, groups, communities, channels, and broadcast lists fetched from your connected accounts, including names, usernames, phone numbers, chat IDs, and photos, stored so your automations can reference them.

Message data — messages and media that pass through your automations, plus delivery logs (source, destination, status, duration, errors). Media downloads are optional and controlled per session.

Billing data — plan, payment history, and transaction identifiers. Card and UPI details are processed by Razorpay; TON payments occur on-chain. We never see or store full card numbers.

Usage data — IP address, browser type, pages visited, and API request metadata, used for security, rate limiting, and product improvement.

• Operating sessions, automations, auto replies, and the API
• Processing subscriptions and payments
• Sending service notifications (session drops, failed jobs, billing)
• Preventing abuse, spam, and unauthorized access
• Improving reliability and features through aggregate analytics
• Complying with legal obligations

We do not sell your data, read your messages for advertising, or use your content to train AI models.

Where GDPR or similar laws apply, we process data to perform our contract with you (operating the Service), for legitimate interests (security, fraud prevention, improvement), with your consent (optional features like media download), and to meet legal obligations (tax and accounting records).

We share data only with processors needed to run the Service:

• MongoDB Atlas — primary database hosting
• Redis hosting — job queues and caching
• Razorpay — payment processing
• Email delivery providers — transactional email

Each processor is bound by data-processing agreements. We may also disclose data when required by law or to protect the rights and safety of users and the Service.

Account data is kept while your account is active. Message logs are retained for up to 90 days, then purged on a rolling basis. Session credentials are deleted immediately when you delete a session or your account. After account deletion, remaining personal data is removed within 30 days, except billing records we must keep for tax law.

AES-256 encryption for session credentials at rest, TLS for all data in transit, bcrypt password hashing, JWT-based dashboard authentication, role-based access controls, and rate limiting on all endpoints. No system is perfectly secure — report vulnerabilities to support@teleauto.com and we will respond promptly.

Depending on your jurisdiction, you may have the right to access, correct, export, or delete your personal data, restrict or object to processing, and withdraw consent. Exercise these from Dashboard → Settings or by emailing support@teleauto.com. You may also lodge a complaint with your local data-protection authority.

Messages you relay are also processed by WhatsApp and Telegram under their own privacy policies. You are responsible for having a lawful basis to process the personal data of your contacts and group members through your automations.

We use essential cookies for authentication and session state. We do not use third-party advertising cookies. Analytics, where used, are privacy-respecting and aggregate.

The Service is not directed at anyone under 18, and we do not knowingly collect data from children.

We will announce material changes to this policy by email or in-app notice before they take effect. The date at the top reflects the latest revision.