telepath

Privacy Policy

Last updated 16 September 2026

Telepath is a product of lemma (lemma.company). It connects your Telegram Business account to your own AI assistant so you can search, read and reply to your business chats. This policy explains what we process and why. Questions: hello@lemma.company.

What we process

• Your Telegram Business 1:1 messages — text, captions, file and media metadata, and voice/video notes — archived so your assistant can search and read them.
• Optional, only if you enable them: groups the bot is added to, the bot's own direct messages, and notes you create in Telepath.
• Account & auth — your Telegram user id and login (to identify your account), OAuth tokens (stored hashed), and, if you connect your own bot, its token (stored encrypted).
• Billing — your subscription status and Telegram payment charge id. Payments run through Telegram Stars; we never see card or bank details.

Why we process it

Only to provide the service you asked for: searchable history, reading files and transcribed voice, replying as you, notes, and billing for paid features. We do not sell your data and we never use it to train AI models.

Who it is shared with

• Your AI client (ChatGPT, Claude, Grok, etc.) — you connect it yourself; your requests and the data you ask it to read flow to it under that provider's terms.
• Mistral (Voxtral, EU) — only if you enable paid transcription: the audio of voice/video notes is sent for transcription and is not reused or used for training. If you prefer no third party, the local (whisper) transcription option keeps audio on our server.
• Telegram — the platform your messages already live on.

About the people you chat with

Your business chats contain messages from the people who contact you. As the owner of that inbox you are the controller of that data; you are responsible for handling your contacts' information lawfully, as you already are with any CRM, email, or helpdesk tool. Telepath acts as a processor on your behalf.

Retention & your controls

• Data is kept until you delete it. Send /deletedata to the bot to permanently erase your entire archive, settings and subscription record.
• Remove the bot in Telegram → Settings → Business → Chatbots to stop any further archiving; revoke the connector in your AI client to cut its access.
• Media files are deleted from our server as soon as a transcript is stored.
• Adjust what the connector may do at any time with /settings.

Security

Traffic is encrypted in transit (TLS). Each account's archive is a physically isolated database; auth tokens are hashed and connected-bot tokens encrypted at rest; and the server's disk uses full-disk encryption (LUKS), so stored data is encrypted at rest. Telepath is not end-to-end encrypted — running search and transcription requires our servers to read your data, so we can technically access it and only do so to operate the service or, with your request, for support. If you need a guarantee no operator can read it, the connector can be self-hosted on your own machine.

Children

Telepath is not directed to children under 13 and must not be used by them.

Changes

We may update this policy; the date above changes with it. Material changes will be surfaced in the bot.