Telegram Bot and Telegram Mini App Privacy Policy

This Policy applies to the Alemdar Dursun Studio Telegram bot, Telegram Mini App and connected features at alemdardursun.com. It supplements the general Privacy Policy for the Telegram environment.

Alemdar Dursun Studio is a professional brand and digital platform managed by Alemdar Dursun. Data operator: Alemdar Dursun. Contact: info@alemdardursun.com.

This Policy covers bot launch, language selection, commands and buttons, conversations, files, Mini App, account linking, requests, orders, lessons, publications, bonuses, notifications and data-rights requests.

Depending on your action, we process Telegram user ID, username, first and last name, Telegram language, selected bot language, first launch and last activity dates, /start, referral or deep-link parameters, menu choices, messages, captions, photos, documents, video, audio, voice, stickers, links and contacts you voluntarily send.

We also retain interaction history, subscriber and block status, notification choices, broadcast delivery information and button events. The current system does not separately download your Telegram profile photo.

Mini App receives Telegram WebApp initData to confirm its launch source. The server verifies the signature, freshness and user payload before recording a protected open event. Telegram ID, username, names, language, session information, opening time, browser or device technical data, security logs and the account link may be processed.

Public section views are not tied to a Telegram profile unless required for a requested function or security.

If Telegram is linked to a client account, name, email, phone, company, country, city, language, orders, lesson access, bonuses, referrals, notifications, files, correspondence and account settings may be processed.

Passwords are never stored or displayed in plain text; only a secure password hash is retained. Existing passwords are never sent through Telegram.

Messages and files sent to the bot enter the Alemdar Dursun Studio administration system, may be viewed by authorised administrators, used to answer you and linked to a request, order or account. File metadata and Telegram file IDs are retained for download and response; images may be optimised for delivery.

Please do not send passwords, full payment-card details, medical records, government identifiers or other sensitive information unless separately agreed and necessary for a specific service.

A conversation may become a lead or be linked to an order after specialist confirmation. Task details, contacts, status, price, currency, comments, files, stages and interaction history may be retained. A bot message alone does not form a contract.

Mini App and the website may show published lessons, vlog posts and purchased or assigned access. Personal access records may include status, progress and assignment or purchase date. Public content does not require a Telegram profile unless a feature requires one.

When loyalty features are used, bonus balance, credits, debits, reasons, referral codes and visit or registration results are processed. These records belong to the client relationship and are not used by Telegram for its own calculations.

First-party events may record bot launch, language selection, menu opening, support start, referral source, campaign, event type and time. They support interface operation, statistics, security and improvement. Optional third-party web analytics does not start without the relevant cookie choice.

Purposes include operating the bot and menu, language, Mini App, account creation and linking, communication, requests, orders, support, content, transactional notices, bonuses, security, abuse prevention, analytics, improvement, contracts and legal duties. Marketing is used only with separate permission.

Depending on context, grounds include user-requested pre-contract steps, contract performance, legal duties, establishment or defence of rights, balanced legitimate security and improvement interests, separate voluntary consent and other applicable grounds. One blanket consent is not used for everything.

AI may assist initial classification, draft replies, dialogue summaries, translation, lesson or service search, request structuring, support automation and analytics.

AI is not a contracting party and makes no final price or deadline decisions. A person confirms important terms; AI can be wrong. You may request a specialist and should not send unnecessary sensitive data to AI.

Access is limited to Alemdar Dursun and authorised staff or specialists. Necessary providers may include Telegram, hosting and database, file storage, email, AI, technical contractors and authorities acting under law. Analytics or payment providers are included only when actually connected to the relevant function.

Telegram, email, AI, cloud infrastructure and international support may process data across borders. Transfers are purpose-limited and use an applicable ground and available contractual, organisational and technical measures.

Telegram profile data is kept while the bot is used or the function needs it; correspondence during support and rights-defence periods; orders during performance and mandatory legal periods; security logs normally up to 12 months; analytics normally up to 14 months; marketing choices until withdrawal plus proof retention.

After account deletion, eligible data is erased or anonymised, while mandatory contract, accounting, tax, security or dispute records remain only as necessary.

Measures include role-based access, password and identifier hashing, protected sessions, Telegram initData and webhook-secret validation, security logs, file-size limits and organisational controls. No system removes all risk; incidents are handled and notified where law requires.

You may request information, a copy, correction, marketing withdrawal, notification changes, Telegram unlinking, account deletion, erasure or anonymisation, restriction, objection or ask a question. Use info@alemdardursun.com, /data-request or the bot. Bot subscription is not required to exercise rights.

Unlink Telegram in client-account privacy settings or through a data request. The client link and Telegram personal features end; required order, security and acceptance records may remain on an applicable ground.

Use /delete-account or /data-request. After identity verification, Telegram is unlinked, active sessions end and access may be restricted while handled. You may also request message and file erasure where applicable.

Some data may remain for orders, contracts, accounting, rights defence, security, fraud prevention and legal compliance.

Transactional notices concern order status, messages, lesson access, payment, account security or required action. Marketing includes news, lessons, vlog, promotions and offers.

Marketing is separately enabled, never required to use the bot, can be disabled in settings and records consent or withdrawal time. Continuing after first launch is not marketing consent.

The bot and services are intended for persons able to enter relevant transactions. Minors must use commercial features with representative permission where law requires. Contact us to review and remove improperly supplied child data.

Telegram is an independent third-party platform. It does not operate Alemdar Dursun Studio, and Alemdar Dursun Studio does not control Telegram infrastructure. Telegram processing follows https://telegram.org/privacy. Using the bot does not change your relationship with Telegram.

New versions are published with a number and date. Material changes may be announced in the bot or require renewed acknowledgement. Published versions are retained to identify the document applicable at the time.

Operator: Alemdar Dursun. Brand: Alemdar Dursun Studio. Website: https://alemdardursun.com. Email: info@alemdardursun.com. Data management: https://alemdardursun.com/data-request. Deletion: https://alemdardursun.com/delete-account.