Privacy Policy — Ava AI Telegram Bot

Last updated: 2026-06-18

This Privacy Policy describes how Ava Protocol ("we", "us", "our") collects, uses, and protects information when you interact with the Ava AI Telegram bot (the "Bot") — our AI DeFi Guardian. It applies to the production bot and to pre-launch/development bots (e.g. @AvaProtocolDevBot) operated by Ava Protocol.

The Bot is non-custodial. It never takes custody of your funds, never asks for your private keys or seed phrase, and cannot move your assets on its own. It reads on-chain data and, only when you explicitly approve an action, helps you prepare a transaction you confirm yourself.

1. Who We Are

Ava Protocol is the operator of the Bot and the data controller for the information described below.

Contact: contact@avaprotocol.org

2. Information We Collect

We collect only the information necessary to operate the Guardian — to read your positions, alert you, and (with your confirmation) help you act.

2.1 Telegram account information

  • Your Telegram user ID and chat ID (used to deliver alerts and continue your conversation)
  • Your Telegram username and display name, if set
  • Your language setting, if provided by Telegram

2.2 Conversation content

  • The messages, commands, and button taps you send to the Bot. We use them to understand your request, operate the Guardian's features, and improve the service. We do not read messages outside your direct chat with the Bot.

2.3 Wallet address and on-chain data (provided by you)

  • A public wallet address you share so Ava can read your positions. This is read-only — sharing an address does not grant any ability to move funds and requires no signing or wallet connection.
  • Publicly available on-chain data associated with that address (e.g. token balances, lending positions, health factors, token approvals, transaction history), retrieved from public blockchains and third-party data providers.

2.4 Referral and attribution information

  • If you started the Bot from a campaign link, the start parameter from that link (a short, non-personal campaign/variant tag) so we can understand which message brought you here. This tag does not identify you personally.

2.5 Information we do NOT collect

  • We never collect, request, or store your private keys, seed phrases, or recovery phrases. Never share them with the Bot or anyone claiming to be Ava — we will never ask.
  • We do not take custody of your funds and cannot transfer your assets without an on-chain transaction you approve yourself.
  • We do not collect information about you from Telegram chats other than your direct conversation with the Bot.

3. How We Use Your Information

We use the information above solely to operate the Bot's stated features:

  • Read and summarize your DeFi positions when you share an address
  • Monitor your positions and send you alerts before risk gets serious (e.g. liquidation risk, risky approvals, idle funds)
  • Propose actions in plain English and, when you confirm, help you prepare a transaction you sign yourself
  • Attribute new conversations to the campaign that referred you (aggregate, non-personal)
  • Maintain, secure, debug, and improve the service

We do not sell your information, and we do not use it for advertising profiling.

4. Non-Custodial Actions & Signing

The Bot itself cannot execute transactions. When an action is needed:

  • Ava proposes the exact action and expected result, and you confirm it.
  • Signing and permissions happen in Ava Studio (the web app at app.avaprotocol.org), in your own wallet — not inside Telegram.
  • Any action the Guardian takes on your behalf is bounded by on-chain spend limits you set, which it cannot exceed, and which you can change, pause, or revoke at any time.

5. Where Your Information Is Stored

Information is stored on infrastructure operated by us or our hosting/cloud providers, with access restricted to what is needed to run the service. On-chain data is, by nature, public.

6. Third Parties

The Bot relies on the following categories of third-party services, which may process information needed to provide the service:

  • Telegram — the messaging platform the Bot runs on. Your use of Telegram is also governed by Telegram's own Privacy Policy.
  • Blockchain data providers and public RPC/indexers (for example, portfolio/position data and on-chain reads) — used to retrieve the public on-chain data associated with an address you share.
  • Cloud hosting and infrastructure providers — used to operate and secure the service.

These providers process information only as needed to provide their service to us. We do not sell your information to third parties.

7. Retention

We retain information for as long as needed to operate the Guardian for you (for example, to keep monitoring a position you asked us to watch and to reach you with alerts), and as needed for security, debugging, and legal compliance. You can ask us to delete your information as described below.

8. Your Rights

  • You can stop the Bot at any time (block it in Telegram, or use the in-chat controls to pause or stop monitoring).
  • You can use the in-chat /privacy command to find this policy, and request access to or deletion of your information by contacting us.
  • To exercise any of these rights, contact contact@avaprotocol.org.

9. Children

The Bot is not directed to children under 13 (or the minimum age required in your jurisdiction), and we do not knowingly collect information from them.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by the "Last updated" date above and, where appropriate, communicated in the Bot.

11. Contact

Questions about this Privacy Policy or your information: contact@avaprotocol.org