Privacy Policy

Lobbby helps businesses take orders and bookings in Telegram: each business gets its own bot and storefront, and an AI agent helps the owner and answers customers. This page explains what data that involves, why, who it is shared with and how long it is kept.

This policy covers the lobbby.app website, the main bot @lobbbybot, business bots connected to Lobbby and their mini apps — the storefront and the owner’s console. “We” means the Lobbby service. Contact us at hello@lobbby.app.

Who is who

• Business owners set up a storefront, manage orders and talk to their AI agent.
• Customers open a business’s bot or storefront, ask questions or place orders.
• We are the platform team: we run the service, handle complaints and may suspend a bot that breaks the rules.

The owner of a business sees the customer details in that business’s orders: they accept the order and contact the customer. How the owner uses that data outside Lobbby is their decision and their responsibility. One business’s data is not available to other businesses.

What data we process

Telegram profile. Your numeric user ID, name, @username and Telegram language. A customer’s profile photo is stored encrypted and is visible only to the business owner on the customer card.

Chats with the AI agent. The messages you send the bot and the agent’s replies. The agent remembers separate facts from the chat — for example, “prefers evening slots” — so it doesn’t ask again.

Orders and bookings. What was ordered, booking date and time, and the form fields the business asks for: name, phone, email, address, map location and a comment. They are filled in for your next orders with the same business, so you don’t type them again. A payment screenshot is stored encrypted, and only if the customer sends it after tapping “I’ve paid”.

A location sent in chat. Kept for 24 hours and not passed to the AI model.

Owner materials. Photos, price lists, menus and documents the owner sends for the storefront and knowledge base. Stored encrypted.

Storefront activity. Opening the storefront, viewing a service, starting a selection and going to checkout. The owner sees their storefront’s statistics from these. In the main bot we see a visitor’s steps: starting from a link, sending a message (not its text), opening the mini app and storefront examples.

Reviews. Customer reviews of a business are public and shown in its storefront along with the owner’s replies.

Complaints and feedback. A complaint via /complaint or a message via /feedback reaches us with your Telegram name, so we can follow up.

The lobbby.app website. What is stored in your browser is described below in Cookies and browser storage.

The bot does not download photos sent by customers and does not pass them to the AI model.

Why

• To run storefronts, orders, bookings and their notifications.
• So the AI agent answers to the point, keeps context and helps the owner run the business.
• So owners see their orders, customers and storefront statistics.
• To handle complaints, protect the service from abuse and fix errors.
• To understand what is useful on the website — only if you agreed to statistics.

We do not sell data or show ads based on it.

AI

The agent’s replies are written by an AI language model from a third-party provider. To reply, the model receives the conversation text and its earlier part. Owner photos and documents are sent to it to read a price list, menu or description. Customer photos and locations sent in chat are not sent to the model. Semantic search in the knowledge base runs on our server.

The agent is software and can make mistakes. Important agent actions are confirmed with buttons in Telegram, deletions always.

Who data is shared with

We share data only with services Lobbby cannot work without, and only as much as needed:

• Telegram — messages, bots and mini apps run on it.
• The AI model provider — as described above.
• Contabo — servers in Singapore where the service data is stored.
• Cloudflare — delivering the website and mini apps, a secure connection to our server, the lobbby.app domain and email.
• Apple Maps — the map and location picker in the mini app: your browser loads the map from Apple.
• OpenStreetMap (Nominatim) — address search: only the search text or the point is sent.
• Brave Search — web photo search when the owner asks for it: only the search query is sent.
• TelemetryDeck — lobbby.app website statistics, only with your consent.

Each of these services has its own privacy policy. Data may be processed in different countries. We will disclose data where required by law if we receive a request that is binding on us.

How long data is kept

• A whole business is deleted with all its data — storefront, orders, customers, agent memory and files — if the business bot is deleted in Telegram or there has been no activity from the owner or customers for 30 days. The owner is warned 3 days, 1 day and 1 hour before and can keep the business with one tap.
• Unused photos and documents are deleted after 7 days.
• A location sent in chat — 24 hours.
• What the agent remembered about a customer — up to 365 days; the owner’s notes about a customer — up to 3 years.
• Chats with the agent are kept while the business exists. The /clear command starts a fresh conversation, but the previous one stays archived until the business is deleted.
• Error log — 90 days.
• Backups are made daily and encrypted; the latest 7 are kept.

Managing your data

• Customers can ask the bot to forget what it remembered about them. The bot shows exactly what will be deleted and asks for confirmation. The order history stays with the business.
• Owners can export orders to CSV from the console, and delete the whole business by writing to us. A business is also deleted automatically, as described above.
• Website statistics can be turned on or off at any time: “Cookie settings” at the bottom of every page.
• For any question about your data — a copy, a correction, deletion — write to hello@lobbby.app.

How we protect data

Each business’s data is separated at the database level. Photos, documents and payment screenshots are stored encrypted, and backups are encrypted. Our team’s console does not show chats, the agent’s memory about customers, order contents or business files. Administrators do have technical access to the server, so we do not promise that data is absolutely inaccessible — or that there are no vulnerabilities.

Cookies and browser storage

The lobbby.app website stores in your browser only what it needs to work, and statistics only with your consent. You can change your choice via “Cookie settings” at the bottom of the page.

Statistics. After “Accept”, the site sends page views (page address, language, theme, the site you came from and the link’s campaign tags) and taps on buttons leading to Telegram to TelemetryDeck. You are represented by a random number, which TelemetryDeck stores hashed; there is no name, email or Telegram data. If you choose “Essential only” or withdraw consent, no statistics are sent and the number is erased.

Mini apps in Telegram keep the cart and the last open screen in device and Telegram storage, so you can pick up where you left off.

Cloudflare, which serves the website, processes technical request data — IP address and browser details — to deliver pages and protect the site.

Changes

We update this policy when the service changes. The date of the latest version is shown at the top of the page.