Privacy Policy

• Your messages and files are encrypted with a key only you hold. The Snamdan team, the developer who built Snamdan, the owner of the service and our hosting company cannot read them.
• Nothing is saved until you agree. The Telegram bot asks you to read this policy and our Terms of Service and tap I agree before it keeps anything.
• We do not sell your data, show you ads, or use your chats to train artificial intelligence. We could not read them to do so even if we wanted to.
• You stay in control. Delete a single chat or your whole account at any time.
• We are honest about the limits. Telegram can read Telegram Business chats, and some details stay readable so the app works. Both are explained in section 3.

Snamdan is built with zero-access storage. That means we designed it so that we cannot open your saved chats, rather than simply promising that we will not.

How it works

• When you set up message encryption, your own browser creates your personal key. It is never created on our server.
• That key is locked with your passphrase, which never leaves your device. Our server only ever stores the locked copy, which is useless without your passphrase.
• Every chat gets its own key, and each message and file is sealed with it the moment it arrives. Our server can lock new messages, but it has no way to unlock them again.
• When you open your chats, the unlocking happens inside your browser. The readable text is never sent back to us.

Who this keeps out

Nobody except you can read your saved messages and files. That includes:

• The Snamdan team, including support staff
• The developer who built Snamdan
• The owner and operator of the Snamdan service
• Our hosting and storage providers
• Anyone who steals a copy of our database or backups
• Other Snamdan accounts

We would rather tell you the limits than overpromise. These are the things encryption on our side cannot change:

• Telegram can read Business chats. Telegram Business chats are ordinary cloud chats, not Telegram Secret Chats, and bots cannot join Secret Chats. This is true for every app that works with Telegram Business.
• The moment a message arrives. Telegram delivers each message to our server as plain text. Our server seals it within milliseconds and never writes the plain text to a database, a file, a log or any other storage. A person in control of the server could, in theory, change the software to copy messages before they are sealed. We do not do this, and our ingest and encryption code can be reviewed to confirm it.
• Some details stay readable, as listed in section 2, so that your user list, search by name and counts keep working. They show the shape of a conversation, never its content.
• If you lose every way to unlock, we cannot help. If you forget your passphrase and also lose your recovery key, your passkeys and every other signed-in device, your messages cannot be recovered by anyone. That is the price of nobody else holding a key.
• Optional Snamdan recovery. If you choose to turn on Snamdan recovery, your key is split in two: one half is stored by us and the other is emailed to you. Neither half works alone, but someone holding both our half and access to your email could unlock your saved chats. It is off unless you turn it on.

About you, the account owner

• Sign-in details: email address, a scrypt hash of your password (never the password itself), and your Telegram or Google identity if you sign in with them.
• Profile details you choose to add: name, date of birth, phone number, location and a profile photo.
• Account details: account name, owner name, phone number, and your Telegram Business connection.
• Sign-in sessions: a device label, browser type, IP address and the times you signed in, so you can see and sign out other devices.
• Encryption records: your public key and the locked copies of your private key. We cannot unlock them.
• Payments: your plan, the amount, the KHQR transaction reference and its status. We never see or store your bank card or banking credentials.
• Your agreement to this policy and our Terms (see section 6), and any message you send to support.

About your users

• Their messages and files, encrypted as described in section 2.
• The readable details listed in section 2, which Telegram provides with each message.

We use the information above only to:

• Save your chats and show them back to you
• Sign you in, keep your account secure and detect abuse
• Process payments for your plan
• Send you messages about your account, such as security notices
• Answer your support requests
• Meet our legal obligations

We never sell your data, rent it, use it for advertising, or use your chats or files to train artificial intelligence.

Before Snamdan keeps anything for you, the Telegram bot shows you this Privacy Policy and our Terms of Service and asks you to tap I agree. You must open both documents first. Until you agree, no chat is saved and your data is not used.

When you agree, we store a record of it: your Telegram id and username, your Snamdan account, the versions of both documents, when you opened each one and when you agreed. We keep this record even if you later delete your account, as proof that we only processed your data with your permission.

If we change either document in a way that matters, the bot asks you to agree again before saving continues. You can withdraw your consent at any time by removing the bot in your Telegram Business settings or by deleting your account.

We do not sell or trade your information. We only share it with:

• Service providers that run Snamdan for us, such as hosting, file storage and email delivery. They only ever receive your messages and files in encrypted form.
• Payment providers (Bakong KHQR) to process a plan payment.
• Telegram, which delivers messages to and from the bot.
• Authorities, when the law requires it. We can only hand over what we hold, and your encrypted messages and files remain unreadable to us and to them.

• Messages are kept until you delete them, their chat or your account.
• Files are kept for your plan's media history: 30 days on Free, 90 days on Pro, and without a time limit on Business and Enterprise.
• Deleting a chat destroys that chat's key. From that moment, its messages and files can never be read again, including any copies inside old backups.
• Deleting your account closes your sign-in straight away and permanently erases your saved chats after a 30-day grace period, in case the request was a mistake. Your messages, files, users, keys, payments and settings are all erased. We keep only a small record: your email, Telegram and Google ids, name, when you joined and left, your reason, your last plan and whether you ever paid. It lets us recognise you if you sign up again, so offers meant for first-time users are not claimed twice.
• Consent records are kept as described in section 6.

• Messages and chat keys are sealed with X25519 public-key encryption, and files with XChaCha20-Poly1305, using the widely reviewed libsodium library.
• Your passphrase is strengthened with Argon2id, so guessing it is slow and expensive.
• Every stored file carries a SHA-256 checksum, so any change to it can be detected.
• Passwords are stored as scrypt hashes, connections use HTTPS, and you can sign out any device from Settings.
• New unlock methods and every account recovery are announced to you by Telegram and email, so a takeover cannot happen silently.

You can, at any time:

• See and correct your profile and account details in Settings
• Export the evidence for any chat
• Delete a single chat, or your whole account
• Sign out other devices and remove unlock methods
• Withdraw your consent, as described in section 6
• Ask us what information we hold about you

Snamdan records conversations with your users on your behalf. You decide to use it, so you are responsible for telling your users that chats are recorded wherever the law requires it. If a user asks us about their data, we will direct them to you, since only you can read their messages.

Snamdan is not meant for anyone under 18, and we do not knowingly create accounts for them.

When we change this policy, we update the version and date at the top of this page. If a change matters, the Telegram bot asks you to agree again before saving continues. We never apply a change to data we collected in a way you did not agree to.

Questions about privacy? Send us a message from the Support page in your dashboard, or send /support to the Snamdan bot in Telegram.