Privacy Policy
Effective date: June 4, 2026. Obuchat Assistant (“we”, “us”) operates a Telegram bot and Mini App at assistant.obuchat.me for calendar, tasks, reminders, and integrations including Zoom.
Operator contact: privacy@obuchat.me
1. Information we collect
- Telegram account data: user ID, username, and display name — required to authenticate you in the bot and Mini App.
- Messages and files you send: text, voice, and attachments — processed only when you use a feature (calendar, notes, transcription, Zoom commands, etc.).
- OAuth tokens and integration settings for services you connect (Google Calendar, Todoist, Zoom, Yandex Disk) — stored on our servers to act on your behalf.
- Technical logs: timestamps, errors, and usage metrics (e.g. API calls) — for reliability, security, and billing.
2. Zoom-specific data
When you connect Zoom via OAuth, we may store and process:
- Zoom user ID, display name, and email (from
user:read:user). - OAuth access and refresh tokens — to create, update, and delete meetings on your behalf.
- Meeting metadata you trigger through the assistant (topic, start time, join URL, meeting ID) — to fulfill your requests and sync with Google Calendar when enabled.
- Webhook events such as
meeting.ended(host ID, meeting topic, meeting ID) — only to support in-app notifications related to your meetings.
We do not download or store Zoom cloud recording files. Meeting recordings made by Leo’s meeting bot may be uploaded to your Yandex Disk if you connect that integration (see below).
3. Yandex Disk
If you connect Yandex Disk via OAuth, we store your OAuth token and account profile (login, email) to upload Zoom meeting recordings you trigger through Leo: the audio/video file plus PDF transcript and summary into a folder named Leo/Записи встреч on your disk. Without connecting Yandex Disk, no files are sent to Yandex.
4. How we use information
- Provide assistant features you request.
- Authenticate you and maintain integrations you authorize.
- Operate, secure, and improve the service.
- Respond to support requests and comply with legal obligations.
5. Sharing with third parties
We share data only with:
- Services you connect (Google, Todoist, Zoom, Yandex, OpenRouter, and similar) — to perform actions you request.
- Infrastructure providers that host and operate the service — under contractual confidentiality and security obligations.
We do not sell personal information.
6. Retention
- OAuth tokens and Zoom profile fields — until you disconnect Zoom in the Mini App, we receive a Zoom deauthorization notification, or you delete the integration from your Zoom account.
- Message content — retained only as long as needed for the requested feature (e.g. calendar parsing, transcription history where enabled).
- Technical logs — typically up to 90 days, unless a longer period is required for security investigations or legal compliance.
7. Security
Data is transmitted over HTTPS (TLS 1.2+). OAuth tokens are stored on secured servers with restricted file permissions. Secrets are not published in client-side code.
8. Your rights and data deletion
You may:
- Disconnect Zoom in Mini App → Profile → Zoom → Disconnect or remove Obuchat Assistant from your Zoom account (Manage → Added Apps → Remove).
- Disconnect Yandex Disk in Mini App → Profile → Yandex Disk → Disconnect.
- Request access, correction, or deletion of your data by emailing privacy@obuchat.me or contacting us through the Telegram bot.
After disconnection or deauthorization, we delete stored Zoom OAuth tokens and Zoom profile metadata linked to your account within 24 hours. Aggregated technical logs without personal identifiers may be retained longer.
9. International transfers
Data may be processed on servers located outside your country. We apply appropriate safeguards for cross-border processing where required by law.
10. Changes
The current version is always available at this URL. Material changes will be communicated through the bot or Mini App.