Co.

Privacy Policy

Version of 25 October 2026

In short

  • You sign in to Co.Space only with Telegram. We never ask for a password or an e-mail.
  • From Telegram we get your Telegram ID, name, username and photo. Everything else you add yourself.
  • The site has no visitor analytics and no advertising pixels.
  • If a Co.Space AI agent is added to a group chat, it saves that chat's messages. See "Messages in group chats".
  • We do not sell your data.
  • To delete data: your personal agent erases its conversation with you via /forget_me; we delete everything else on request at @cospace_support or [email protected].

Who we are and what this covers

Co.Space is a platform for communities, events, trips, places and experts.

The data controller is an individual: Maksim Zaikin. Contact: Telegram @cospace_support, e-mail [email protected].

This policy covers cospace.world, the dashboard at admin.cospace.world, the @Co_Assistant_Bot bot, community bots and Co.Space personal AI agents.

What we collect

When you sign in with Telegram

  • your Telegram ID, first and last name, username and language;
  • your profile photo: we store a copy so we can show it on the site;
  • when you sign in through the Telegram mini app, also the public parts of your Telegram profile: bio, Premium badge, extra usernames, linked channel, and your birthday if you have made it visible in Telegram.

Your name and photo refresh every time you sign in. To change them, change them in Telegram.

What you add yourself

  • your profile: bio, time zone, links to Instagram, LinkedIn, website, X, YouTube, Telegram;
  • your answers when you first talk to the bot: city, interests, preferred format;
  • the communities, events, trips, places and expert profiles you create, with their photos;
  • event sign-ups, applications to communities and trips with your answers to the organizer's questions, bookings (dates, number of guests, message), speaker applications;
  • messages you send to organizers through the platform, reviews, bookmarks and follows;
  • forms on Co.Space pages. For example, the city leader form collects your name, contact (Telegram username or phone), city, country, experience and answers to questions. The form will not submit without your consent, and we record when you gave it.

Conversations with bots

What you write to @Co_Assistant_Bot and to your personal agent is saved along with their replies, so the bot remembers the conversation. Voice messages are turned into text.

Messages in group chats

This section also applies to people who do not have a Co.Space account.

  • Personal AI agent. If a chat member adds their agent to a group, the agent saves every text message in that chat: the text, the author's name and Telegram ID, the time and the chat name. These messages power morning digests, search ("who mentioned…") and people matching for members of that community. For search, the text is turned into a search index.
  • Chat history. A community founder can upload an export of their chat's history from Telegram. It is stored the same way.
  • Community founders see summaries and topics of their chat, message counts and the most active members by name.
  • Community bot. It replies when mentioned. It keeps recent chat messages only in server memory, not in the database, so it can write a daily summary when the community lead asks for one. It deletes obvious spam and may restrict a spammer in the chat. It remembers who wrote to it privately: name, username, when they wrote and how many messages.
  • People matching needs both sides to agree: we introduce two people only if both say yes.

Don't want other members' agents to find your messages in search? Turn off "Let others find me" in your dashboard. Your messages will still be saved. You can ask support to delete them.

Technical data

  • Our server's request logs — the page address, time and result — are kept without IP addresses; but the site runs behind Cloudflare, which sees a visitor's IP address to protect against attacks. We use the logs to troubleshoot failures.
  • Bot technical logs may keep the beginning of messages the bot has seen.

Payments

Paid community memberships are paid in Telegram Stars. We never receive your card details. We store what was paid for, the amount, how long it is valid and the payment ID.

Who can see what

Everyone, even without signing in:

  • your public profile page, if you have a Telegram username: name, photo, bio, Telegram Premium badge, the social links you added, the date you joined, the communities you founded or help run, and the events, places and trips you host. The list of communities you belong to can be hidden with the "Show my communities" switch;
  • the "Who's going" block on an event or trip page: the name and photo of the first people who signed up, plus the total count;
  • the communities, events, trips, places, expert profiles and reviews you publish.

Only signed-in users: contacts of communities and places, and some expert contacts (Instagram, LinkedIn, website, booking link).

Event or trip organizers: the list of people who signed up (name, username, photo), your answers and messages in the application, and whether you attended.

Community founders and their team: the member list and each member's status, including payment, join applications with answers, speaker applications and chat statistics.

Place owners: your bookings.

The Co.Space team (moderators and admins): what we need for support, reviewing publications and stopping abuse, including your Telegram profile data.

Who we share data with

Only services Co.Space cannot run without:

  • Telegram: sign-in, bots, notifications, Stars payments. Site and dashboard pages load a Telegram script, so Telegram can see that you opened a page.
  • Supabase: database and photo storage.
  • Hetzner (Finland) and DigitalOcean: our servers.
  • Cloudflare (USA, with points of presence in the EU): protection against attacks and faster page loading. Requests to the site and to our server pass through Cloudflare, so it sees the page address and your IP address.
  • AI services — they receive only the text needed for the task at hand:
    • Anthropic: replies from @Co_Assistant_Bot and personal agents, chat analysis for founders;
    • OpenAI: voice-to-text, the search index of messages and profiles used for search and matching, and site recommendations based on your interests and city;
    • Google: community bot replies and summaries, search and recommendations on the site.
  • Google Maps: maps on event, place and city pages. When a map loads, Google sees your IP address.

Some of these services operate outside your country, including in the United States.

We do not sell data or share it with ad networks. We disclose data to a public authority only where the applicable law requires it.

Cookies and browser storage

  • One cookie, NEXT_LOCALE, remembers your language.
  • Your browser stores your sign-in key and name (so you stay signed in), your chosen language and recent places from the map search.
  • The site has no visitor analytics or ad pixels. If we ever add any, we will update this policy first.
  • The site does not ask for your location.

Notifications

All notifications come through Telegram: applications, sign-ups, bookings, review of your publications, event reminders and digests for founders. We send no e-mail newsletters. To stop notifications, stop the bot in Telegram.

Why we use data and on what basis

  • To run the service you asked for: sign-in, profile, sign-ups, applications, bookings, payments, notifications.
  • With your consent: forms, personal AI agent, people matching.
  • Our legitimate interests: stopping spam and abuse, reviewing publications, statistics for founders who connected a bot or agent.
  • Recommendations of events and communities based on your city and interests.

How long we keep data

  • Group chat messages: 12 months, then we delete them.
  • Recent messages held in a community bot's memory are cleared whenever the server restarts.
  • Everything else we keep while you have an account or until you ask us to delete it.

Your rights and how to delete data

You can find out what data we hold about you, correct it, delete it, withdraw consent or object to its use.

  • Personal agent: /export sends you a file with your agent's settings and your conversation with it. /forget_me erases that conversation and the agent's settings. It does not delete group messages or matching results; we delete those on request.
  • Everything else: write to @cospace_support or [email protected]. Write from the Telegram account the request is about, so we know it's you. We reply within 30 days.
  • No Co.Space account, but your messages are in a chat with our agent? Write to support too and tell us which chat.
  • You can also complain to the data protection authority in your country.

Age

Co.Space is not intended for people under 16.

Security

Our servers and the Co.Space team can access data when the work requires it. No system is fully secure. If a breach affects your data, we will tell you in Telegram.

Governing law

The applicable law is the law of the operator's country of residence.

Changes

The version date is at the top. We will announce significant changes in the @Co_Assistant_Bot bot.