Privacy Policy

1. Who processes the data

The data controller (“operator” under Russian law) is Ekaterina Vladimirovna Shoshkina, a self-employed individual registered in Russia, taxpayer number (INN) 732507391610 (the “Operator”).

This Policy covers the DeloPulse service: the @delo_pulse_bot bot in Telegram, its Mini App and the delopulse.com website (the “Service”). Data is processed in accordance with Russian Federal Law No. 152-FZ of 27 July 2006 “On Personal Data”.

By starting to use the Service you agree to this Policy. If you do not agree, please do not use the Service; section 8 explains how to have data you already shared deleted.

2. What data we process

Telegram account data. The Service has no sign-up: your Telegram account is your identity. We receive from Telegram and store your numeric user ID, first name, last name, @username and interface language, plus a flag showing that you opened a private chat with the bot. The Service does not request or store your phone number, profile photo or contact list.

Group data. The group’s ID and title, its type, language, time zone, working-hours settings, the bot’s permissions in the group, forum topic names, and the list of members the bot has learned about.

Work content. Tasks (title, description, due dates, assignees), each assignee’s status, comments, checklists, completion marks and the history of actions on a task. For attached files we store only the Telegram file identifier, its type, name and caption — the files themselves stay on Telegram’s servers.

Group messages. The bot can see messages in the group in order to recognise tasks addressed to it and to learn who is in the group. The text of messages unrelated to tasks is not stored.

Feedback. The rating, category and text of a review or survey answer, if you choose to send one.

Donations. If you supported the project with Telegram Stars, we store the amount and the payment identifier issued by Telegram. The Service receives no payment details.

Website visitor data. The website runs a Yandex Metrica counter: it uses cookies and collects device and browser information, IP address, pages viewed and on-page actions (including session replay). The web server keeps a technical request log: IP address, page address, browser information and time.

Linking a site visit to adding the bot. When you click the “add the bot” button on the website, your Yandex Metrica visitor identifier is placed into the link. The bot stores it together with the fact of connection — this is how we learn which pages and ads bring users.

The Service does not process special categories of personal data or biometric data. Please do not put such information into task texts or comments.

3. Why we process it

• to run the Service: create tasks, show statuses, send reminders and digests;
• to check permissions: who is in a group and what they may see and change;
• to answer requests and investigate failures;
• to improve the Service and understand where users come from, using aggregated statistics;
• to protect the Service from abuse.

We do not sell data, do not show ads inside the bot and do not use the content of your tasks for advertising.

4. Legal basis

Data is processed with your consent, which you express by starting to use the Service, and to perform the Terms of Use to which you are a party. You can withdraw consent at any time — see section 8.

In a group, members assign tasks to one another. Whoever adds the bot to a work group informs its members that the Service operates there and is responsible for being entitled to enter information about them into tasks.

5. Who sees your data inside the Service

Each group’s data is isolated. A group’s tasks, assignee names and their statuses are visible to the members of that group — that is the purpose of the Service. Tasks in a personal space are visible only to the person who assigned them and the person they are addressed to. Permissions are checked on the server on every request.

6. Who receives the data and where it is stored

Data is shared only with those without whom the Service cannot work:

• Telegram. The Service works through the official Telegram Bot API: all bot messages and actions pass through Telegram and are subject to its privacy policy.
• Hosting provider. The Service’s database and servers are hosted in a data centre in the Russian Federation.
• Language model provider. If the bot cannot parse a message in which you assign a task using its own rules, the text of that message (up to 1,000 characters) is sent to a language model together with the date, the group’s time zone, the names of its preset assignee groups, and the first and last names of group members (up to 50 people). Identifiers, @username, attachments, chat history and other tasks are not sent; the provider is located in the Russian Federation and does not store the request text. The model only labels the text — it does not decide due dates, statuses or permissions.
• Yandex. Website visitor data collected by the Yandex Metrica counter.

The Operator stores and processes personal data on servers located in the Russian Federation and does not transfer it abroad. Telegram processes its users’ data independently, under its own rules.

Data may be disclosed to others only where the law expressly requires it.

7. How long data is kept

• Account, group and task data — while you or your group use the Service, and until a deletion request is received.
• When the task’s creator or a group administrator deletes a task, the history of actions on it is deleted too.
• A Mini App session lasts no longer than 48 hours and ends after 12 hours of inactivity.
• Web server logs — no longer than 90 days.
• Yandex Metrica data — for the periods set by Yandex.

Task and comment texts, names and tokens are not written to the Service’s technical logs.

8. Your rights and data deletion

You may ask what data about you is processed, require it to be corrected, blocked or deleted, withdraw your consent, and complain about the Operator’s actions to the Russian data protection authority (Roskomnadzor) or to a court.

To exercise these rights, write to info@delopulse.com and state your Telegram @username or user ID — otherwise we cannot find your data. We reply within 10 business days and delete or anonymise the data within 30 days of the request. Records of tasks that belong to a group may remain there in anonymised form.

Some things need no request: a task can be deleted by its creator or a group administrator, and the bot can be removed from a group or blocked in a private chat at any time — after that no new data reaches us.

9. How data is protected

• connections to the website, the Mini App and Telegram are encrypted (TLS);
• Mini App sign-in is confirmed by a Telegram signature verified on the server;
• only confirmed members of a group have access to its data;
• only the Operator has access to the servers and the database;
• keys and tokens are kept separately from the code and never appear in logs.

10. Cookies

The website uses Yandex Metrica cookies and remembers your chosen language in browser storage. You can disable cookies in your browser settings — the website and the bot links will keep working. The bot and the Mini App use no advertising cookies.

11. Minors

The Service is designed for work teams and is not directed at children. We do not collect information about users’ age.

12. Changes to this Policy

We may update this Policy. The current version is always published on this page, with its effective date shown at the top. By continuing to use the Service after an update you accept the new version.

13. Contact

This is a translation of the Russian original. If the two differ, the Russian text applies.