Security
Security & Permissions
The bot uses only the rights below. Your admins stay in control. This service is fully automated. Nobody on our side monitors your community live.
Telegram admin rights
Add @communityoncallbot and turn on only these three rights. Leave every other admin right off. Admins can post by default, so the bot can send answers and approved posts.
Delete messages
The bot removes spam and scam links from the group.
Ban/restrict users
The bot stops raiders, bot joiners and members who keep posting spam.
Pin messages
The bot pins safety notices and posts you have approved.
Discord permissions
The invite asks for these permissions and no others. Put the bot’s role above the roles it moderates, or Discord will not let it time out or ban those members.
View Channels
The bot has to see the channels you ask it to moderate.
Send Messages
The bot posts answers, warnings and safety notices.
Send Messages in Threads
Questions often continue in a thread. This lets the bot answer there.
Embed Links
A cited answer can include a link from your approved docs.
Read Message History
The bot reads recent messages so it can spot spam and answer in context.
Manage Messages
The bot removes spam and scam links.
Timeout Members
The bot can temporarily restrict a member who is posting spam.
Ban Members
The bot can remove a member who keeps breaking the rules.
What we store
The bot processes message content in the communities you connect so it can moderate, answer and compile reports. You keep ownership of that data. Answers use your approved docs in up to five configured languages. We do not train on your data. We use paid AI services that don't train on your data.
Retention is the schedule in the Privacy Policy. In short: application and contact records are kept for the life of the application and, if you become a client, for the subscription plus 24 months. Marketing-consent records are kept until you withdraw consent, then for 3 years. Message content is kept for 30 days, or until an open escalation or abuse review closes. Uploaded documents are kept for the subscription, then deleted within 30 days after it ends, or sooner if you ask. Weekly and monthly reports are kept for the subscription plus 12 months. Help-desk questions are kept for 12 months. Billing records, including the checkout consent record, are kept for as long as tax and accounting law requires. Security and rate-limit logs, including IP address, are kept for 90 days. Where a retention period is not listed here, it is set out in the Privacy Policy.
Separate records
On this website, each application, contact message and checkout consent is stored as its own record with its own id. One record is not written into another. You can verify that in src/lib/leads.ts. This website does not process community messages, so live-chat separation is not implemented here and is not claimed.
Revoke access
Remove the bot from the group or server, or demote it, and it loses access immediately. /pause stops the AI until you run /resume. /cancel ends the subscription. You can also cancel in one click from the dashboard or the reminder email once you are subscribed.
Offboarding and deletion
When the subscription ends, stored community content is deleted on the schedule in the Privacy Policy. You can ask for deletion sooner through the contact form.
Incident contact
Report a security incident through the contact form. No certification is claimed.
How to grant these rights
- 1
Telegram
Add @communityoncallbot to your group. Make it an admin with only these rights: Delete messages, Ban/restrict users, and Pin messages. Leave every other right off. Admins can post by default, so the bot can send answers and approved posts.
- 2
Discord
Invite the Community on Call bot and approve these permissions: View Channels, Send Messages, Send Messages in Threads, Embed Links, Read Message History, Manage Messages, Timeout Members, and Ban Members. Make sure the bot's role sits above the roles it moderates, or Discord won't let it time out or ban those members.
Open the Discord invite - 3
Your admins
Name one or more admins, and an admin channel or group. Escalations go only to your own admins.
- 4
Your material
Share your FAQs, docs and links. Pick up to five configured languages, and pick the posting tone.
- 5
Go live
Run /setup in your group or server. The checklist confirms rights, admins, languages and tone, and moderation starts straight away.