Privacy Policy

This policy covers the Mafiabot.me website, CreateBot onboarding Mini App, tenant bot admin tools, public tenant pages, and related platform APIs. It does not replace Telegram’s own Privacy Policy for data Telegram processes as an independent service.

It also does not cover the separate Mafia SO mobile application unless you use features that explicitly connect to this platform.

Account and Telegram data: Telegram user identifiers, username, display name, language preferences, and Mini App init data needed to authenticate and authorize owners.

Bot credentials: bot tokens you submit during onboarding. Tokens are stored encrypted and used only to operate your connected bot (for example webhooks and Telegram Bot API calls).

Bot configuration: selected roles, game modes, languages, feature flags, subdomain slug, and related owner settings.

Usage and operational data: group/user activity metrics exposed in owner tools or the public catalog, webhook delivery status, payment-related transaction references when you use platform payment flows, logs needed for security and abuse prevention, and basic technical data such as IP address, browser type, and cookies for locale/theme preferences.

We use this information to provide and improve the platform: connect and run tenant bots, serve branded subdomains and Mini Apps, show available statistics, process supported payments, prevent fraud or abuse, provide support, and meet legal obligations.

We do not sell your personal data.

We may share data with infrastructure providers that host or deliver the service (for example servers, databases, CDN, and payment processors) under appropriate agreements.

Bot content and public pages you enable may be visible to end users of your bot or visitors of your subdomain.

We may disclose information if required by law or to protect the platform, users, or others from harm or abuse.

We retain bot and owner data for as long as your bot remains connected or as needed for security, accounting, dispute resolution, and legal requirements. You may request deletion of your tenant bot and associated platform records by contacting support; some logs may be retained for a limited period for security purposes.

We use reasonable technical and organizational measures, including encrypted storage of bot tokens and access controls. No method of transmission or storage is completely secure.

You can change locale and theme preferences in the website UI. You can disconnect or request removal of a bot by contacting support. Because authentication relies on Telegram, you should also review Telegram’s privacy settings.

For privacy questions or deletion requests related to Mafiabot.me, email [email protected].