cimbot

Privacy Policy

Last updated: 25.10.2026

Who we are

Cimbor is operated by Mykhailo Brych, a self-employed developer in Spain (the data controller). Contact: brychmykhailo@gmail.com.

What we collect

• Telegram account data: your Telegram user ID, first name and language.
• What you send to the bot: text messages, voice messages, photos and PDF documents, shared locations, and the items created from them (reminders, tasks, events, notes, lists, expenses, subscriptions, places, birthdays).
• Settings: name, city and approximate coordinates (for weather and your time zone), digest times.
• Usage statistics: number of requests, voice seconds and storage used — to apply plan limits.
• Google data (only if you connect Google): OAuth tokens (stored encrypted), and the calendar events, tasks and notes document that Cimbor creates or syncs on your request.

How we use it

Only to provide the service you ask for: understand your requests, store and show your items, send reminders and digests, sync with Google if you enabled it, and enforce usage limits. We do not sell your data, do not use it for advertising and do not build profiles.

Service providers (processors)

• Anthropic (Claude API, USA) — interprets your messages. Message text and relevant items (for example, events for the dates you ask about) are sent to answer a request. Not used to train models under Anthropic's commercial terms.
• Groq (USA) — converts voice messages to text. Audio is processed in memory and not stored by us.
• Hetzner Online (EU) — server hosting and database.
• OpenWeather — receives only approximate coordinates of your city for the forecast.
• Google — only if you connect your account.
• Telegram — delivers messages and files.

Transfers to the USA rely on the providers' Standard Contractual Clauses / data processing terms.

Google user data

Cimbor requests only: calendar.events (create and update the events you ask for, and show your calendar events in the bot), tasks (create and complete your tasks) and drive.file (one Google Doc with your notes, created by Cimbor — no access to your other files).

Cimbor's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Google data is used only to provide the features you see in the bot; it is not sold, not used for advertising, not used to train AI models, and not read by humans except with your permission, for security, or where required by law. Event titles may be processed by our AI provider only to answer your own request (for example, "what's on this week?").

You can disconnect Google at any time with /settings → "Disconnect Google" in the bot or at myaccount.google.com/permissions; we then delete the stored tokens.

Storage and retention

Data is stored on servers in the EU. Recent conversation context is kept for up to 7 days. Your items and files are kept until you delete them or your account is closed. Backups are rotated and removed within 30 days. Google tokens are encrypted at rest.

Your rights

Under the GDPR you can request access, correction, deletion, export or restriction of your data, and object to processing — write to brychmykhailo@gmail.com. You can also complain to the Spanish Data Protection Agency (AEPD).

Children

Cimbor is not intended for children under 14.

Changes

We will post updates on this page and announce significant changes in the bot.