Privacy
What connecting your Telegram actually means
Letting software into your messages deserves a straight answer, so here is the whole of it — what Autome does, what it never does, and every company that touches any part of it.
Connecting your Telegram account is optional. Saving, recall, lists, reminders, shared spaces and web search all work without it.
What Autome does
- Searches your chats at the moment you ask a question that needs it, and not before
- Uses your own Telegram account, so it sees what you see — nothing more
- Sends a message only when you ask it to, and refuses to guess when a name matches two people
- Stores your login session encrypted at rest (Fernet — AES-128-CBC with HMAC-SHA256)
- Disconnects the moment you send
/disconnect_telegram
What it never does
- Read or monitor your chats in the background
- Copy your message history into our database
- Keep anything it found in Telegram unless you tell it to save that
- Show your data to another user — every account is isolated
- Capture anything you didn't send it or ask for
Who else sees your data
Autome isn't built from nothing, so a few companies necessarily touch parts of it. Here is exactly which, and exactly what each one gets.
- Telegram
- Carries your messages to and from the bot, the same as any chat you have there.
- Anthropic
- Claude writes the replies. It receives your message plus whatever part of your own memory is relevant to answering it.
- Transcribes your voice notes (Gemini, reached through OpenRouter below). It receives the audio clip and nothing else — no name, no chat history.
- OpenAI
- Reads replies aloud, turns your saved items into the index that makes search work, and steps in to transcribe voice notes if the primary is unavailable.
- OpenRouter
- The gateway those two are reached through. It routes each request to whichever company is serving that model at the time — which can be Anthropic or OpenAI directly, or Amazon, Google or Microsoft running the same model. We send every request with data collection set to "deny", so it can only be routed to providers that do not collect prompts.
- Kagi
- Only when you ask something that needs the web. It receives the search phrase and any page address to fetch — never your conversation, your saved items, or your Telegram history. Queries are sent under Autome's own API key with no user identifier attached, so Kagi is never told who asked. Kagi is a paid, ad-free search engine, and its published policy says queries are logged only briefly for debugging and then purged.
- Supabase
- Hosts the database and file storage where your items and uploads live.
- LangSmith
- Debugging traces, while we polish the assistant. It receives conversations with the assistant — under a scrambled identifier, not your name or Telegram id — on LangSmith's EU servers, where traces are deleted after 14 days. This is temporary instrumentation: when it's switched off, this entry comes down with it.
We don't sell your data and we don't use it to train anything. Connecting Telegram is entirely optional, and you can link or unlink whenever you like.