Privacy Policy

Date:: 2023-12-17

Introduction

This Privacy Policy describes how we collect, use, and handle your personal information when you use @Spotted_DMI_bot.

Information We Collect

Each user is assigned a unique User.id by telegram, which corresponds to their Chat.id. It can be easily obtained by any client or bot and is not to be considered sensitive information. In fact, it is necessary for the bot to send the user messages, as shown in the prototype of sendMessage().

How We Use Your Information

When a spot or report is submitted, the User.id is stored in the database. This is done for the following reasons:

To notify the user of the outcome of the admin’s judgment on your spot.
To respond to user inquiries and provide support.
To prevent spamming of spots (each user can have only one spot in pending at any given time).
To allow the user to cancel a spot still pending, before receiving the final judgment of the admins.
To ban a user.

To see more in detail what tables require the User.id, please refer to the Database Schema section.

Are spots and reports anonymous to the admins?

Yes. While the bot has to store the User.id in order to function, the information is not shared with the admins. Spot and reports are presented to them without any information about the original sender.

Even when replying to a spot or banning an user, the admins are not shown any information that could be used to identify the user.

Are spots anonymous to the other users?

Yes. All normal users with access to the channel will see the spots as sent by the bot. No information about the original sender is available to them.

How long we retain your information for

The bot only stores the User.id as long as a spot is pending. Upon admin’s approval or rejection, the record is expunged from the database. This also happens when the user /cancel a spot still pending.

Reports are a different matter. Again, the User.id is stored in order to prevent miss-use and to allow communication between the admins and the user. But there is currently no system in place to delete reports from the database.

Data Security

All data is stored on the server hosting @Spotted_DMI_bot. Access to the server is restricted to a small subset of the developers of the bot. All of them are trusted in not accessing the data and keeping it safe and confidential. In any case, the User.id alone provides very little information, since the content of the actual spot is not stored in the database.

Updates to This Privacy Policy

We may update this Privacy Policy to reflect changes in our practices. We will notify users of any material changes by posting the updated policy on our website or through other communication channels.

Contact Us

If you have any questions or concerns about this Privacy Policy, please contact us by opening an issue on GitHub.

Acceptance of Terms

By using @Spotted_DMI_bot, you signify your acceptance of this Privacy Policy. If you do not agree to this policy, please do not use the bot in order to send spots.

This Privacy Policy is effective as of the date stated at the beginning of the document and may be subject to updates. Please review this policy periodically for any changes.