Privacy Policy
Gromus is an assistant-protector bot for Telegram. It connects to your account through Telegram Chat Automation, checks the links and files you receive for threats, and warns you privately. This policy explains exactly what Gromus does and does not collect.
What Gromus does
Once connected, Gromus inspects incoming links and files in your chats for scams, phishing, and malicious apps, and sends you a private warning when something looks dangerous.
Your messages are not stored
Gromus does not store or use the text of your messages. It only extracts the links and files that need to be scanned.
What is stored
For each warning we keep the verdict, the reason, the threat signature (the domain, the normalized URL, or the file hash), counts, and a timestamp — plus your own settings and any feedback you send. We do not keep message text and we do not keep your contacts.
No sender personal data
Gromus does not collect personal data about the sender of a message (no name, user id, or phone number) — only the technical fingerprint of the threat itself.
Files are deleted quickly
A file is downloaded only to scan it and is deleted within about a day. Only its hash and the analysis result are kept.
External services
To check a link, its URL may be compared against public blocklists and threat-intelligence services (for example Google Web Risk). Only the URL is sent.
Strict mode
Strict mode is optional and off by default. If you turn it on, Gromus will also delete a dangerous message from the monitored chat.
Who can access the data
The data is visible only to the administrators who support Gromus.
Retention and deletion
You can ask for your stored data to be deleted at any time using the contact below.
Lokator
Lokator (voice message forwarding) is an optional feature, off by default. When you turn it on, Gromus forwards the voice messages you receive to your private chat with the bot — meaning you can listen to a voice message without opening the chat. The voice is sent only to you and is not stored. The message is re-sent from a temporary copy, and that copy is deleted within a day or two.