Security

ModerBot security and privacy

By the way Telegram works, a moderator bot sees the group's messages — otherwise there would be nothing to moderate. So here are the specifics: what exactly it receives, what of that is stored, for how long, and where it goes to be checked.

What ModerBot sees

Telegram is built this way: an ordinary bot in a group receives only the messages addressed to it, while an admin bot receives all of them. That is not a quirk of ModerBot but the condition without which moderation is impossible in principle.

Messages from the groups where the bot is an admin.
Your conversation with the bot itself in private messages.
Groups' service events: joins, leaves, rights changes.
The sender's public profile data: name, username, identifier.

What the bot does not see: your private conversations with other people, a group's history from before it was added, other people's groups it was never added to, or members' phone numbers — Telegram does not pass those to a bot.

Which rights are needed and what for

Four. Each one covers a specific part of the job; the bot asks for nothing spare.

Admin rights

Without them Telegram does not pass the group's messages to the bot, and there is nothing to check.

Delete messages

Needed to take a violation down. Without it the bot can only warn.

Ban users

Needed for bans, restrictions and lifting restrictions.

Invite links

Telegram grants this right together with managing members; it is also used when checking a channel subscription.

What is stored and for how long

The retention periods are set in the code and apply automatically: records are deleted once their time is up, with nobody involved.

Decision log — 7 days

A moderation event: the message text, the category, the reason, the action taken and the author's details. It exists so you can see why the bot deleted a message and undo it. After 7 days the record is deleted.

Message texts — 1 day

Kept only for the AI digest, which reads no deeper than 12 hours back. They are deleted after a day.

Group settings — while the group is connected

Rules, schedules, welcome and auto-reply texts, language, time zone. Deleted along with the group.

Member statistics

Message and violation counters, join date and last activity — so the member card can be shown and the rules for newcomers applied.

Images — not stored

An image is checked on the fly and never saved as a file. What goes into the log is the result of the check, not the file.

Payments

The bot is free and there are no payments at all: we neither collect nor store any payment details.

Where messages go to be checked

Most of the checks run on our side. Where meaning is what decides, the message is sent to a language model.

Infrastructure

The services and the database run on Google Cloud, region us-central1. We have no servers of our own.

Language model

The OpenAI API is used to judge meaning and to build the AI digest. The text of the message being checked is sent there; the author's name and identifier are not needed for that and are not sent.

Image checks

An image is passed to our recognition service, processed, and not stored.

The CAS spammer database

When a new member joins, their numeric identifier is checked against the open CAS database. Only the identifier is sent.

What happens when things are removed

You deleted the group in the panel

The group's record, its link to your account and its settings are deleted. The log and the texts disappear on their own retention schedules.

You removed the bot from the group

Moderation and posting stop immediately and you get a notification. The settings are kept: bring the bot back and everything carries on.

You took a right away from the bot

That part of the protection stops working, and you get a private message telling you which right is missing. Protection is never switched off silently.

Frequently asked questions

Can the bot read my private conversations?

No. The bot receives only the messages of the groups an admin added it to, plus your conversation with the bot itself. It has no access to your private chats with other people and cannot have any — Telegram does not offer that.

Does the bot see messages sent before it was added?

No. A group's history from before the bot was added is not available to it.

What happens to my data if I stop using the bot?

Moderation and posting pause, but the settings, rules and schedules are kept. Nothing is deleted — bring the bot back and everything carries on as before.

Can I delete my data?

Yes. Delete the group in the panel and its record, its link to your account and its settings are deleted. The event log and message texts disappear on their own once their retention period runs out.

Does the bot store passwords?

ModerBot has no passwords for group owners: you sign in through Telegram. There is nothing to store.

Still have questions?

If something is missing from this page, write to us and we will add the answer here rather than in a private reply.

Add to Telegram