Privacy Policy

Sviteya — chatbot automation service for Telegram and Instagram · https://app.sviteya.ai · Last updated: 16 August 2026

1. Who we are

Sviteya (“we”, “the Service”) is a SaaS platform at app.sviteya.ai that lets businesses build chatbot funnels for Telegram and Instagram, manage subscriber conversations, schedule meetings and accept payments.

The Service is provided by Olena Khyzhniak, trabalhadora independente registered in Portugal, NIF 310017246. Contact: support@sviteya.ai.

Two roles. We are the controller of data about our customers — the people who create a Sviteya account. We are a processor of data about their subscribers — people who write to our customers’ bots on Telegram or Instagram: that data belongs to the customer who connected the bot, and we process it on their instructions only.

2. Data we collect

Account data: when you sign in via Telegram Login, we receive your Telegram ID, name, username and profile photo. If you register by email, we store your name and email address.

Subscriber data: messages and interactions between your bot’s subscribers and your bot (names, usernames, Telegram IDs, message texts, button clicks, custom fields and tags you define, payment records).

Technical data: tracking parameters (utm_*, click identifiers) when a visitor follows your tracked links, plus IP address and user agent used for advertising attribution you configure.

2a. Instagram data

If you connect an Instagram professional account, the Service accesses it through the Meta APIs with the permissions you grant: instagram_basic, instagram_manage_messages, instagram_manage_comments, pages_show_list, pages_read_engagement, pages_messaging, pages_manage_metadata and business_management.

This lets the Service receive and send direct messages on behalf of your account, read and reply to comments on your posts and live videos, receive mentions and message reactions, and read the public profile of people who contact you (username, name, profile picture, follower count).

We store: the access token (encrypted at rest), your Instagram account and Page identifiers, incoming and outgoing messages, comments the funnels acted on, and the profile fields listed above. We do not download or store your posts, stories or media files — stories and media are referenced by links provided by Meta and expire with them.

You can disconnect Instagram at any time in Integrations inside the Service, or revoke access in Instagram (Settings → Websites and apps) or Facebook (Settings → Business Integrations). We delete the access token immediately upon disconnection.

3. Google user data

If you connect your Google account, the Service requests the following scopes:

Google Calendar (calendar.events, calendar.freebusy): used solely to check your availability and to create, update or cancel meeting events that your subscribers book through your bot. We do not read events the Service did not create, other than free/busy status.

Google Sheets (spreadsheets): used solely to read and write rows in the specific spreadsheets you explicitly configure inside your funnels.

We store only the OAuth refresh token (encrypted at rest with AES-256) and the identifiers of spreadsheets you registered. We do not store copies of your calendars or spreadsheets.

Limited Use disclosure: Sviteya’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, do not sell it, and do not allow humans to read it except with your consent, for security purposes, or as required by law. Google user data is never used to train AI/ML models.

4. How we use data

We use the data exclusively to provide the Service: run your funnels, deliver messages, schedule meetings, process payments through providers you connect (Stripe, WayForPay), and show you analytics of your own bots. We do not sell personal data and do not use it for third-party advertising.

5. Storage and security

Data is stored on servers in the European region. Bot tokens, API keys and OAuth tokens are encrypted at rest. Access to production systems is restricted to authorized personnel.

6. Data sharing

We share data only with processors necessary to run the Service (hosting provider, Telegram Bot API, and — when you connect them — Meta, Google, Zoom, Stripe, WayForPay, Anthropic). We never share your data with other customers or advertisers.

Anthropic (Claude). Sviteya can be operated through Claude via the MCP connector. When you connect it, the data the assistant requests — contacts, fields, event log, products, webinars — is sent to Anthropic in the United States. This happens only after you connect the connector yourself, and stops as soon as you disconnect it.

Some processors are located outside the European Union. Such transfers rely on standard contractual clauses or adequacy decisions where applicable.

7. Retention and deletion

Data is retained while your account is active. You can delete contacts, disconnect integrations (which deletes stored tokens) or request full account deletion at support@sviteya.ai — we delete the data within 30 days. You can also revoke the Service’s Google access at any time at myaccount.google.com/permissions.

8. Changes

We may update this policy; the current version is always available at this address.