Privacy Policy

Last updated: June 17, 2026 — Effective immediately

Overview

FTM TG2DRIVE BOT ("the Service", "we", "us") is a Telegram bot that enables users to upload Telegram files directly to their personal Google Drive accounts. This Privacy Policy explains what information we collect, how we use it, and how we protect it.

By using this Service, you agree to the collection and use of information as described in this policy.

🔒 Core commitment: Your files are never stored on our servers. All uploads go directly from Telegram to your own Google Drive. We only store the credentials required to perform this action on your behalf.

Information We Collect

We collect only the minimum data necessary to operate the Service:

Data	Source	Purpose
Google account email address	Google OAuth	Identify connected account
Google display name	Google OAuth	Display in bot confirmations
Google OAuth access & refresh tokens	Google OAuth	Upload files on your behalf
Telegram user ID	Telegram API	Link your Telegram account to Drive credentials
Drive folder preference	User setting (/setfolder)	Upload to chosen folder
Filename tag preference	User setting (/settag)	Rename uploaded files per preference

We do NOT collect:

Google account passwords
Contents of files (files are streamed directly, not read by us)
Access to Google Drive files not created by this Service
Browsing history or usage analytics
Payment information

How We Use Your Information

We use the data we collect exclusively to provide the Service:

Authenticate your Google Drive access using the stored OAuth credentials
Upload files you request via Telegram to your chosen Google Drive folder
Manage Drive folder and filename preferences you configure
Send you confirmation messages within Telegram after successful uploads

We do not use your data for advertising, profiling, or any purpose beyond operating the Service.

We do not sell, trade, rent, or share your personal information with any third parties, except:

Google LLC — OAuth tokens are sent to Google's servers to authenticate Drive access. This is the normal OAuth flow and is governed by Google's Privacy Policy.
Legal requirements — We may disclose information if required by law or to protect the rights, property, or safety of our users or others.

We do not share data with advertisers, analytics providers, or data brokers.

Security

We implement industry-standard security measures to protect your data:

Fernet Encryption (AES-128-CBC) — OAuth tokens are encrypted before storage and decrypted only when performing uploads.
HTTPS / TLS — All communication between your browser and our server is encrypted in transit.
Access Control — Only authorized bot users can authenticate and use the Service.
No plaintext secrets — No credentials are stored in plaintext at any point.
Principle of Least Privilege — We request only the Google Drive permissions strictly required for file uploads.

Data Retention

Your data is retained only for as long as your account remains connected to the Service:

OAuth tokens and associated account data are stored until you disconnect using /logout in Telegram.
Upon /logout, all stored tokens, linked account information, and preferences are permanently deleted from our database.
You may also revoke access directly from your Google Account Permissions page at any time.

Your Rights

You have the right to:

Access the data we hold about you (contact us at the email below)
Delete all your data instantly using /logout in Telegram
Revoke Google Drive access at any time from Google Account Permissions
Request data correction or clarification by emailing us

Google API Services User Data Policy

FTM TG2DRIVE BOT's use and transfer of information received from Google APIs to any other app adheres to the Google API Services User Data Policy, including the Limited Use requirements.

ℹ️

We use Google Drive API access solely to upload files on behalf of the authenticated user. We do not use Google user data for any purpose beyond the features described in this Privacy Policy. We do not allow humans to read your Google data unless you have given explicit permission, required for security purposes, or required by law.

Contact Us

If you have questions about this Privacy Policy or your data, please contact:

Email: admin@ftmbotzx.dev

We aim to respond to all privacy inquiries within 72 hours.