Khoniflow Privacy Policy

Last updated: October 20, 2026

Khoniflow (khoniflow.com) is a service for small businesses and creators: a Telegram bot with products and payments, connecting your own Instagram, Facebook, Threads, YouTube and TikTok accounts, post scheduling, analytics, an AI assistant and automatic replies. This policy explains what data we receive, why, and how to delete it.

1. Who processes the data

Operator: Tatyana Khon, Republic of Kazakhstan.
WhatsApp: +7 707 111 9846
Telegram: @khoniflow_bot

2. Data we receive

Khoniflow account: name, email, phone, country, password (stored only as a hash), your plan and subscription payment history.
Sign in with Google: your Google name, email address and profile picture. Sign in with Telegram: Telegram ID, name and phone number if you share it.
Connected social accounts (only those you connect yourself through the official login window): access token, account ID and name, profile picture, follower count, your posts and their metrics (views, reach, likes, comments, shares). If you turn on automatic replies, the comments and messages sent to your account, to the extent needed to reply.
YouTube: channel name and ID, the list and statistics of your videos; uploads only of videos you scheduled yourself.
Your Telegram bot: Telegram ID, name and username of the bot's subscribers, their messages to the bot, receipts and orders, so the bot can deliver products and take payments.
Content: text, photos and videos you upload for posts; the AI assistant's knowledge base.
Technical data: server logs (time, request address, errors). Cookies are used only to keep you signed in and remember your language; no advertising or third-party trackers.

We do not receive or store bank card numbers: payments are handled by payment providers.

3. Why we use it

To show your analytics and publish your posts at the time you choose.
To reply to comments and messages on your behalf according to rules you set.
To deliver products and take payments in your Telegram bot.
To send you service notifications and a weekly summary (can be turned off).
For support, security and legal compliance.

We do not sell data, do not use it for advertising and never share one customer's data with another.

4. Who we share data with

Only services Khoniflow needs to work: Meta (Instagram, Facebook, Threads), Google (YouTube, Sign in with Google), TikTok and Telegram, to work with your accounts; Anthropic (Claude AI), which receives questions and the knowledge base to generate AI replies and does not train its models on this data; Railway, our server host; Cloudflare, file storage for posts; payment providers you connect. Government authorities only when required by law.

5. Google and YouTube data

Khoniflow's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Khoniflow uses YouTube API Services: by connecting YouTube you agree to the YouTube Terms of Service; Google's processing is described in the Google Privacy Policy. You can revoke access in your dashboard or on the Google security settings page.

6. Meta data (Instagram, Facebook, Threads)

We use data from Meta APIs only for the features you turn on and comply with the Meta Platform Terms. If you remove Khoniflow in your Instagram, Facebook or Threads settings ("Apps and websites"), Meta notifies us and we automatically delete the access token and data of that account.

7. How long we keep data

While your Khoniflow account is active.
Access tokens and statistics of a social account until you disconnect it; we delete them immediately on disconnect.
When you delete your Khoniflow account, data is deleted immediately and from backups within 30 days. Subscription payment records are kept in anonymised form for as long as Kazakhstan tax law requires.

8. Security

Connections use HTTPS, only the operator has access to the server and database, passwords are stored as hashes, and social access tokens are used only for your account.

9. Your rights

You can ask what data we hold about you, correct it, withdraw consent, disconnect any social account and delete your whole account, in your dashboard or by contacting us. See Data deletion.

10. Subscribers of our customers' bots and accounts

If you message a Telegram bot or account that runs on Khoniflow, the owner of that bot or account controls your data and we process it on their behalf. To delete it, contact the owner or us and we will help.

11. Children

Khoniflow is not intended for people under 16.

12. Changes

We will announce material changes in the dashboard or by email. The date of the last update is shown at the top.