Privacy Policy

1. Who we are

JustBot (justbot.me) is a no-code service for building bots for Telegram and Instagram. The service is provided by Individual Entrepreneur Stepanenko Artem Stanislavovych (Фізична особа - підприємець Степаненко Артем Станіславович). For any question about your data, write to info@justbot.me.

2. What we collect

Your account. Your name, email and password (stored only as a hash), and, if you sign in with Telegram, your Telegram ID, username and photo. Also your interface language and sign-in times.

Connected bots and accounts. Telegram bot tokens. For Instagram: the professional account's ID, username, access token and its expiry, which we receive when you connect the account through Instagram Login and grant the instagram_business_basic, instagram_business_manage_messages and instagram_business_manage_comments permissions.

Data of your bots' users. When people message your bot, we process their platform ID, name and username, language, the messages and answers needed to run your flows, and whatever your flows ask for (a phone number or answers to questions, for example). We process this data on your behalf and on your instructions.

Instagram. For a connected account we receive Direct messages, button taps, replies to its stories and mentions of the account in stories, visits through ig.me links, and comments on its posts (the comment's text, the author's ID and username, the post). The Live chat page keeps the whole conversation with each person: their messages, the account's messages, operators' answers and links to attachments. Members of your workspace can see it. The IDs of comments already answered are kept for 7 days so that none is answered twice. If your flow checks whether someone follows the account, we ask Instagram and do not store the answer.

Payments. Records of orders and plan payments. Card details are handled by payment providers; we never receive them.

Technical data. Cookies that keep you signed in, server logs (IP address, time and address of a request), Google Analytics on the site's pages and the Cloudflare Turnstile check on sign-up.

3. How we use it

Only to provide the service: to run your bots and flows, receive messages and reply to them, send the broadcasts you create, protect the service from abuse, answer your requests and keep payment records. We do not sell data and do not use it for advertising. Instagram data is used only to automate the account you connected.

4. Who we share it with

Telegram and Meta (Instagram), to deliver your bots' messages; Google, if you connect Google Sheets, and for site analytics; Cloudflare, to protect sign-up; payment providers, to take payments; the hosting provider whose servers run the service. Anyone else only where the law requires it.

5. How long we keep it

For as long as your account or bot exists. When you delete a bot or disconnect an Instagram account, we delete its token, flows, subscribers, messages, live chat conversations and variables. If you revoke JustBot's access in Instagram's settings, we switch the bot off and delete its token at once, and on Meta's data deletion request we delete the bot with all its data. Payment records are kept for accounting. Server logs are kept for a limited time.

6. Your rights

You can ask for access to your data, its correction, deletion or a copy, and object to its processing. Write to info@justbot.me. How to delete your data is described on the Data deletion page.

If you are a user of a bot built on JustBot, contact the bot's owner first: they decide what data their bot collects. We will help if they do not respond.

7. Security

The site works over HTTPS only, passwords are stored as hashes, and only the people who need it to run the service have access to the data.

8. Children

The service is not meant for children under 16, and we do not knowingly collect their data.

9. Changes

If we change this policy, the new version will appear on this page with a new date.