Privacy policy of the Afargram service
Edition of 23 October 2026.
1. Who is responsible for your data
The controller of personal data is the sole proprietor (FOP) Obolonskyi Stefan Heorhiiovych, Ukraine (hereinafter "we"). On privacy matters, write to privacy@afargram.com.
The service is not offered to persons located in the European Union, the European Economic Area and the United Kingdom. For this reason, we have not appointed a representative in these jurisdictions.
2. What the service does
On your commands, the service forwards messages between your Telegram account and a WhatsApp bot and, once it is launched, a Viber bot. For this purpose, you give the service access to your Telegram account.
3. What data we process
Account data
- phone number;
- your identifier in WhatsApp or Viber;
- the identifier of your Telegram account;
- the Telegram Session authorisation key, which is stored in encrypted form;
- your settings: lists of important chats and people, language, limits.
Your phone number is needed to provide the service: without it we cannot connect your Telegram account, and you cannot use the service.
Content of correspondence
- message texts, photos, voice messages, chat names, sender names.
The content is processed only to deliver it to you or to send it on your behalf. We do not store the content after delivery. Messages awaiting delivery are stored for no longer than 24 hours. The names of your chats and of the people in them are kept while your Telegram is connected, so that the bot can list your chats and address your messages.
The correspondence contains data of other people: your correspondents and the authors of channels. We process it only to deliver messages to you and do not use it for any other purposes. Section 11 is for them.
Operational data
- the time and number of messages, which chat each came from, delivery statuses, errors. The logs contain no message content.
- whether your Telegram chats are muted or archived, whether a correspondent is a bot, and when you last read Telegram on another device. The bot uses them to decide when to notify you, and deletes them when you disconnect your Telegram.
Payment data
- amount, date, payment status, the receipt. We do not receive your card number: it is processed by monobank. To charge your card every month, monobank keeps it and gives us a token for it and its number with most digits hidden.
Support requests
- your emails and our replies.
4. Why and on what basis
| Purpose | Legal basis |
|---|---|
| To provide the service: forward messages, maintain the account | performance of the contract with you |
| To count usage, accept payment | performance of the contract, obligations under tax law |
| To protect the service and prevent abuse, in particular the connection of other people's accounts | our legitimate interest |
| To deliver to you the messages of other people, who write to you in Telegram | our legitimate interest and yours: you asked to receive them here |
| To respond to requests | performance of the contract, legitimate interest |
5. What we do not do
- We do not read your correspondence. None of our tools shows it, and it is kept only until it is delivered.
- We do not sell data and do not pass it on for advertising.
- We do not build advertising profiles.
- We do not train artificial intelligence models on your correspondence.
- We do not make decisions about you that are based solely on automated processing and would have legal effects.
6. Who receives the data
For the service to work, the data passes through the following recipients:
| Recipient | What it receives | Why |
|---|---|---|
| Telegram | the commands and messages of your account | it is the platform of your account |
| Meta Platforms, the WhatsApp Business Platform service | the messages you receive and send through the WhatsApp bot, your number | delivery through WhatsApp |
| Rakuten Viber | the messages you receive and send through the Viber bot, your identifier | delivery through Viber |
| DigitalOcean, the Netherlands | all data of the service; the session keys and the copies of the database are encrypted | hosting the servers and the copies; it processes the data on our behalf, under its data processing agreement |
| monobank, Universal Bank, Ukraine | data about the payment; monobank keeps your card for the monthly charge | accepting payments and making the receipts |
Telegram, Meta and Rakuten Viber process the data as the providers of the services you use, under their own terms.
Please note: messages that go through the WhatsApp and Viber bots are processed by the servers of those companies.
We disclose data to state authorities only when the law requires it, and only to the extent it requires.
7. Where the data is stored
The servers and the copies of the database are located in the Netherlands. We are located in Ukraine and access the systems from there. The European Commission has not decided that Ukraine protects personal data adequately; the data is protected by the measures of section 9. DigitalOcean, a company of the United States, may access the data under its data processing agreement, which relies on the EU-U.S. Data Privacy Framework and on the standard contractual clauses of the European Commission. Meta, Viber and Telegram process data on their own servers in various countries under their own rules.
8. How long we store the data
| Data | Period |
|---|---|
| Telegram Session key | until you disconnect it; deleted within 24 hours after disconnection |
| Settings and account | while you use the service and for 30 days more |
| Messages awaiting delivery | until delivery, but no longer than 24 hours |
| Operational data and logs | 90 days |
| Links to the connection page and to a copy of your data | a day after they stop working |
| Your number in the list of those invited to the closed test | until the closed test ends, or until you delete your data |
| A number for which we disabled the service for a breach of the contract | until the disabling is lifted, also after you delete your data, so that it cannot be got around that way |
| Your trial and paid time | with your account; when nobody uses the number any more, 30 days after the time ends |
| That your number has had its trial, as a keyed hash from which nobody without our key can tell the number | 2 years from the beginning of the trial, also after you delete your data, so that the trial is given once per number |
| Encrypted copies of the database, without the texts of messages | 30 days |
| Payment records | 3 years, as required by tax law; when you delete your data, they no longer name your number |
| The token of your card at monobank | until you write "stop paying", the card fails three times, or you delete your data; then the card is deleted at monobank too |
| Support requests | 1 year |
What you delete stays in the encrypted copies of the database until they expire. We use them only to restore the service after a failure.
9. How we protect the data
- Session keys are stored encrypted.
- Copies of the database are encrypted with a key that is kept away from the servers, and hold no texts of messages.
- Connections to the servers are encrypted.
- Only a Telegram account whose number matches your number in the messenger can be connected, and only once you send the bot the code the connection page shows after the sign-in.
- The Session of the service is visible in the Telegram settings in the list of devices, and you can end it there at any time.
- Only the owner of the service has access to the servers.
If a data leak occurs that creates a risk for you, we will notify you in the bot or by email without undue delay.
10. Your rights
You can:
- find out which of your data we process and receive a copy of it, also as a file you can take to another service;
- correct inaccurate data;
- delete your data and account;
- restrict the processing or object to it;
- complain to the Ukrainian Parliament Commissioner for Human Rights or to the data protection authority in your country.
How to do this, in the bot:
- "privacy": what we keep about you and for how long;
- "my data": a link to a copy of everything we keep about you, as a file; the link works for an hour;
- "delete my data": ends the Session in your Telegram and deletes your data.
Or by email to privacy@afargram.com. We reply within 30 days, and may ask you to confirm that the request is yours, for example from the bot.
Disconnecting the Session and deleting the account does not delete your messages in Telegram, WhatsApp or Viber. They are managed by those services.
11. If you write to a person who uses Afargram
Your messages to that person, your name and username as Telegram shows them, and the names of the chats you share pass through the service on their way to that person. We receive them from Telegram, through the account of that person, and use them only to deliver them and to carry out that person's commands. We do not contact you and build no profile of you. The texts are kept only until they are delivered, no longer than 24 hours; the records of the messages, without their texts, 90 days. You have the rights of section 10: write to privacy@afargram.com.
12. Age
The service is intended for persons aged 18 or over. We do not knowingly process the data of children.
13. Changes to the policy
We give notice of material changes in the bot or on the website at least 10 days before they take effect.
14. Contacts
FOP Obolonskyi Stefan Heorhiiovych
privacy@afargram.com
afargram.com