Privacy policy

MADBOTS LIMITED ("we"), operates @download_it_bot and collects only the data needed to run it.

Data we collect

Telegram user ID, username, first and last name, language code — provided by Telegram when you message the bot. The ID links your downloads, settings and plan to your account.
Chats you use the bot in — the ID, title and type of every group you add the bot to.
Download history and cache — the URL, the delivered file's metadata (name, size, format) and its Telegram file identifier, kept as your personal library. Downloaded files stay in the shared cache so a second person requesting the same link gets it instantly, without re-fetching it from the source.
Files you upload — on paid plans, a file you send for recognition or storage is kept in your library until you delete it.
Direct connection session — if you connect your Telegram account with /login (a paid feature), an authorised session for that account is stored on our servers so the bot can fetch media the bot's own account can't otherwise reach. We only use it to fetch the media you request — no posting, no reading your messages. You can end the session with the "Disconnect account" button or in Telegram under Settings → Devices.
Settings — your format, caption and editing preferences.
Payment metadata — order ID, plan, billing period, amount, payment method, and an email address if you provided one for receipts. Card details are stored exclusively by the payment provider.
Aggregate analytics — anonymised counts of users, chats and downloads.

How we use it

To fetch and deliver the files you request, to apply your settings, to bill your plan, to show you your history and library, to provide support, and to comply with legal obligations. We do not sell or rent personal data.

Telegram — every message and file is routed through Telegram; see the Telegram privacy policy.
Source platforms — the bot requests public content from the site you link to; your identity is not sent to them, except through a direct connection, where your own Telegram account reaches chats it is a member of.
Audio recognition — a file you ask the bot to identify is fingerprinted and matched against Shazam's catalogue.
Payment providers — process payments under their own PCI-DSS scope; receive only the data required for billing.
Infrastructure providers — hosting, databases, storage and proxies, under data-processing agreements.

Deleting your data

You can request access to, correction of, or deletion of your personal data at any time. Delete individual files from "My files" in the bot or the mini app, or email support@madbots.dev with your Telegram user ID to delete the whole account.

Legal bases

Where the GDPR or the UK GDPR applies to you, we process your data on these bases: performance of a contract (running the bot and your subscription), legitimate interests (keeping the Service secure, preventing abuse, improving it with aggregate statistics), consent (features you switch on yourself, such as AI processing or a connected account — you can withdraw it at any time by switching the feature off), and legal obligation (accounting and tax records).

How long we keep it

We keep data while your account uses it, and no longer than we need it:

settings and configuration — until you delete them or delete your account;
operational logs — pruned on a rolling basis;
billing records — for as long as accounting and tax law requires, typically seven years;
support correspondence — up to three years.

When we no longer need data, we delete it or make it anonymous.

Security

We use access control, encryption in transit, isolated infrastructure and least-privilege access for staff. Only the people who need it can reach production data. No service can promise perfect security, but we treat a breach as an incident: we investigate, fix and notify affected users and, where required, the competent authority.

International transfers

We and our providers operate in several countries, so your data may be processed outside the country where you live. Where data leaves the EEA or the UK, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses, and equivalent mechanisms elsewhere.

Your rights

Wherever you live, you can ask us to give you a copy of your data, correct it, delete it, restrict or object to its processing, or send it to another provider. You can withdraw consent at any time, without affecting what was done before.

Write to support@madbots.dev from the address you use with us, or message @madbots_support_bot with your Telegram user ID. We answer within 30 days. We never charge for this, and we never make the Service worse for you because you exercised a right.

If you are in the EEA, the UK or Switzerland, you may also complain to your local data-protection authority. If you are in the United States, the state privacy laws that apply to you may give you the rights above plus the right to opt out of "sale" or "sharing" of personal data — we do neither: we do not sell or share personal data, and we do not use it for targeted advertising.

Children

The Service is not directed at children under 13, and we do not knowingly collect their data. Telegram's own minimum age applies as well. If you believe a child has given us personal data, write to support@madbots.dev and we will delete it.

Cookies, local storage and tracking

Our websites carry no advertising and no cross-site tracking. They store one value in your browser — the language you chose — so the site opens in it next time. The mini app stores what it needs to keep you signed in inside Telegram.

Because we do not track visitors across sites, we do not respond to "Do Not Track" browser signals; there is nothing for them to switch off.

Changes to this policy

We update this policy when the Service or the law changes. The date at the top always shows the current version, and material changes are announced in the @madbots channel.

Contact

MADBOTS LIMITED, Unit 909, Prosperity Millennia Plaza, 663 King’s Road, Quarry Bay, Hong Kong. Privacy questions and deletion requests: support@madbots.dev.