QEDESH TELEGRAM BOT

Privacy policy

Updated 18 October 2026. This policy describes the owner's personal Qedesh Telegram Bot deployment.

Data used and purpose

With the owner's authorization, Qedesh reads Gmail account identity, message metadata and invoice PDF attachments to find and identify invoices. It processes Telegram messages, voice recordings, uploaded PDFs and envelope photos to carry out the requested tasks. It reads and writes designated OneDrive folders and the letter log.

Service providers

Telegram carries bot messages and submitted files. Relevant text, invoice PDFs and submitted images are sent to the OpenAI API for task interpretation and document extraction; voice recordings are sent for transcription. Filed documents and letter records are stored in the owner's Microsoft OneDrive. Cloudflare handles approved domain operations. The application and its private working data run on the owner's hosted server. Data processing is subject to each provider's applicable service policies.

Google data and Limited Use

Google account access is limited to the Gmail read-only scope. Gmail-derived information is used only to provide the owner's requested invoice workflow. It is not sold, used for advertising, or used by this application to train general-purpose AI models. Qedesh Telegram Bot's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Storage and security

Private server storage holds authorization tokens, task state, invoice metadata, duplicate-detection records, document caches, uploads and recovery copies. Credentials are stored separately with restricted file permissions. API requests to OpenAI use store=false where supported. This does not override provider retention policies.

Retention and deletion

After a new off-server backup has been verified, eligible local temporary PDF, upload and workbook recovery copies older than 30 days are removed. Pending or uncertain work and its referenced files are protected. Task, audit and duplicate-detection records remain until controlled owner maintenance. Weekly encrypted backups are stored in a private OneDrive backup folder: weekly copies from the last 30 days and one representative from each of the last 12 months are retained. The recovery private key remains on the owner's computer; credential files are excluded from the backups. Filed OneDrive invoices and letters remain under the owner's control and are not deleted by this retention process. The owner can revoke Google or Microsoft access from the respective account security settings and stop using the bot. Revocation stops future authorized access but does not automatically delete existing server or OneDrive copies.

Contact

The owner can request access, correction or removal through the private @Qedesh_bot conversation. This public website does not display account records or documents.