Privacy & data sharing

The short version: a team shares the CRM layer, not the Telegram login.

What teammates can and can’t see

• Each user only sees chats from the Telegram accounts they connected. Telegram message content is never shared between teammates unless two people connect the same Telegram account.
• What is shared workspace-wide is the layer on top: custom columns, tags, internal comments, tickets, reminders, and templates. A teammate can see that a chat is tagged VIP at stage Demo — they can’t read the messages inside it.
• Workspace analytics aggregates metadata (counts, response times) across members’ accounts when “Members can see all analytics” is on; raw message bodies stay private.

To share a specific account’s chats, both people connect that same Telegram account — the way teams run a shared support inbox.

How shared data stays attached

In a workspace, a custom-field value is keyed to the Telegram chat ID — not to who connected the account. So if two teammates have the same contact or group, they see the same column values, tags, and comments on it. In a personal (non-workspace) account, values are stored privately against your own chat record.

Excluded chats are per-user: hiding a chat from your view doesn’t remove it for anyone else. It’s the tool for keeping personal conversations out of the team CRM.

Workspace member permissions

Owners/admins set these in Settings → Workspace → Privacy:

Toggle	Default
Members can see all analytics	Off
Members can manage excluded chats	On
Members can edit / delete messages	On
Hide Telegram service chat from members (required for delegated connect)	Off
Shared broadcast templates	Off
Members can export data	Off

Ticketing has its own toggles (enable tickets; members can create / edit / delete), plus SLA settings. Turning off message edit/delete keeps a tamper-proof record — useful for regulated teams.

Your personal privacy controls

Every user has these, regardless of workspace:

• Ghost Mode — appear offline and hidden from presence indicators.
• Data export — export your contacts, chats, groups, analytics, and audit logs as CSV. Rate-limited, and available even if your subscription has lapsed (data portability). This is the app’s export mechanism — the table has no separate export button.
• Delete account — permanently deletes your account and all associated data. Irreversible.

Workspace data & activity log

Owners/admins get a Data tab and an Activity Log:

• Full export — one click for a .zip of contacts, chats, custom fields, and logs (rate-limited).
• Import custom columns — upload a CSV and map it to chat custom fields.
• Activity log — an audit feed of field changes, member and role changes, invites, broadcasts, ticket changes, forwarded messages, and API-key usage (prefix only). Filter by action or member, and export to CSV.
• Delete workspace (owner only) — a typed-confirmation danger zone that cascades across all workspace data and cancels Stripe subscriptions. Immediate and irreversible.