Privacy policy¶
Last updated: 13 October 2026. Data controller: Nuvora Corp, S.A.S. de C.V. (San Salvador, El Salvador), operator of Leoward. Contact: [email protected].
What Leoward processes¶
To work as a group-management bot, Leoward stores:
- Telegram identifiers of the users it sees (ID, first name, last name, public username) and of the groups it is in (ID, title, public username). They are needed to resolve
@usernames, apply bans and show information. - Group membership: which groups each user has been seen in and how many messages they sent. Used for federations and
/info. - Each group's configuration: welcomes, rules, notes, filters, blocklists, locks and the other settings created by admins.
- Moderation history: actions (bans, mutes, warnings) with date, reason and the admin who applied them.
- Payments: the Telegram Stars payment identifier, amount, group and paying user. Never card data.
Leoward does not store message content. Messages are inspected in the moment to apply locks, filters and blocklists, then discarded.
Why and on what basis¶
To provide the Service admins configure (performance of a contract), to prevent abuse (legitimate interest) and to manage Pro payments (performance of a contract). Data is never used for advertising nor sold to third parties.
Where and for how long¶
Data is hosted on servers contracted by the Operator in the European Union (Germany). It is kept while the bot is in the group and for 12 months after it leaves; a group's moderation history is kept while the group uses the Service.
Your rights¶
In a private chat with the bot, /privacy shows a summary of the data linked to your account and lets you delete it with one button (only moderation records where you acted as an admin and payment records required by law are kept). You can also exercise your rights of access, rectification, erasure, objection and portability by writing to [email protected]. You may lodge a complaint with your country's data protection authority.
Processors and third parties¶
Telegram (platform and payments) processes data under its own privacy policy. Hosting is provided by Hetzner Online GmbH (Germany); delivery and protection by Cloudflare, Inc. No other third party has access to the data.
Changes¶
Material changes will be announced in the news channel and here, with the update date.