Privacy & Data Retention

SpamLens processes incoming group images solely to match rules configured by that group's administrators. Source images and temporary Telegram file URLs are never persisted.

Image bytes are inspected ephemerally via Cloudflare Workers AI Vision for verbatim text extraction and discarded immediately after the request completes.

Default stored records are limited to group configuration, rules, wallet counters, Telegram Stars charge IDs, tenant-isolated normalized OCR text (automatically purged after 24 hours), and short masked audit metadata (automatically purged after 14 days).

Any current group administrator may run /deletedata in private chat to delete their group's rules, exemptions, OCR cache, audit log, and active wallet state. Payment ledger records are retained as required for accounting and refund verification.