English (convenience translation – the German version is binding)
Botnexio Join Guard – Welcome & Captcha Bot Starter for Telegram groups – Single-user licence (private licence) · Version telegram_join_guard_license_2026-10-18b · dated 18 Oct 2026
- Licensor: Aramac GmbH, Waldburgstr. 32, 53177 Bonn, Germany, Bonn Local Court HRB 28173, Managing Director: Hidro Youssef, VAT ID DE292780972, email: support@botnexio.com. Aramac GmbH sells the Botnexio products via the botnexio.com marketplace. This licence is for consumers only (§ 13 BGB).
- Right of use: Upon full payment you receive a simple (non-exclusive), non-transferable, perpetual right to use Botnexio Join Guard (TypeScript source code, automated tests in the code (folder
test/), scripts, configuration files, Dockerfile, docker-compose.yml, privacy template and documentation) for your own personal, non-commercial purposes. You may modify and extend the code and run the bot yourself in your own private Telegram groups and community groups (section 3). - Non-commercial groups: You may run the bot only in Telegram groups that are not commercial. Use is commercial if it serves a business, in particular if the group or the bot
- serves customer support for a shop, a company or a paid service;
- belongs to paid channels, groups, subscriptions or memberships or manages such access (e.g. via Telegram Stars, Patreon or other payment services);
- sells, brokers or advertises goods or services or accepts payments; or
- is run on behalf of a company or a client (e.g. as an agency or freelance service or as paid community management).
Permitted are your own private groups and community groups, even if they occasionally accept voluntary donations, provided donations do not unlock any perks (e.g. no access, content or features). You alone are responsible for operating the bot, in particular for the bot token, DATA_KEY, hosting, webhook server and security. We provide no hosting or operation.
Club groups: You may also run the bot for the Telegram group of a non-commercial club (an association whose purpose is not directed at a commercial business operation, § 21 BGB) if you administer the group yourself and are not paid for it. Reimbursement of actual expenses (e.g. server costs) does not count as payment, nor does a tax-free volunteer or trainer allowance under German tax law (§ 3 nos. 26, 26a EStG). The club's membership fees do not make the group commercial as long as access to the Telegram group is not paid for separately. This does not count as operation for third parties (section 4). Use for a commercial business operation of the club (e.g. a club shop) is not covered.
- Not permitted: running the bot commercially (section 3), hosting or operating the bot for third parties or offering to do so (even free of charge), e.g. as a service that others can add to their groups, and reselling, passing on, sublicensing or publishing the product's source code or substantial parts of it, modified or not, as source code, a template or a fork, including in a public repository, in courses or as a download. Running the bot for your own community group and its members does not count as operation for third parties. A private repository of your own project with no access for other persons is permitted, for use in that project only. Business licence: paid community management, use for a commercial club and any use by or for a company are only permitted with the Business licence ("Business-Lizenz", planned; there is no entitlement to it).
- Updates: We provide updates to the extent we are required to by law (§ 327f BGB). You receive updates by email to your order address or via a new download link. We make no further promise of updates. Beyond § 327f BGB we do not promise compatibility with future versions of the Telegram Bot API, grammY, Node.js or third-party services.
- Telegram: operation in your own name and platform rules:
a) You run the bot in your own name, with your own Telegram account and bot token, and you alone are responsible for it. We are not the operator of your bot.
b) You must comply with the Telegram Bot Platform Developer Terms (https://telegram.org/tos/bot-developers), in particular:
- section 4.2 (deletion): delete user data without undue delay on request, when it is no longer needed to run the bot, and when you stop operating your bot. Tools for this include /deletedata, /forget, automatic deletion when the bot is removed from a group, and npm run purge.
- section 4.3 (data minimisation): do not collect, store or process data beyond what is necessary for operation; in particular no member lists, exports or data collections.
- section 4.4 (encryption): keep user data encrypted at rest and store the key separately from it. As shipped, the bot encrypts Telegram IDs and admin texts with AES-256-GCM using the key DATA_KEY. Keep DATA_KEY separate from the database file and its backups and do not switch the encryption off.
Telegram's Terms of Service (https://telegram.org/tos) and the Terms of Service for Bots (https://telegram.org/tos/bots) also apply. Keep your bot token secret.
c) You must store a privacy policy for your bot in @BotFather. A template is included as PRIVACY_TEMPLATE.md (section 8).
d) The name, username, profile picture (avatar) and description of your bot must not contain Telegram logos, trademarks or other brand elements (e.g. no paper-plane logo, no "Telegram" in the bot name) and must not suggest that the bot is affiliated with Telegram.
e) You must not use the bot to send spam, in particular no mass or broadcast messages and no unsolicited messages, e.g. automatic private messages to members. You use moderation rights (mute, remove, ban, delete) only for the stated purpose: protecting your group from spam and raids.
f) The obligations under (b) to (d) are owed mainly to Telegram; complying with them is solely your responsibility. A breach does not affect your right to use the product. The exception is using the bot for spam (e) or for collecting member data (section 4.3); such use is not licensed.
- Third parties, trademarks and dependencies: Changes by third parties, in particular to the Telegram Bot API, grammY and Telegram's rules, are beyond our control. "Telegram" is a trademark of its owner. The name is used descriptively only ("for Telegram groups"); there is no affiliation with or endorsement by Telegram. "Patreon" is a name or trademark of its owner and is named descriptively only. The npm dependencies (e.g. grammY and @grammyjs/auto-retry) are not part of the product; you download them yourself via npm, and they are governed solely by their own licences (see
THIRD_PARTY_NOTICES.md). - Data protection and youth protection: You run the bot and are the sole controller within the meaning of Art. 4(7) GDPR for all personal data of your groups' members it processes, in particular encrypted Telegram IDs, HMAC references, captcha status, timestamps, group IDs, welcome and rules texts and technical logs. This includes members who have never started the bot themselves. We receive no data from your bot and are not your processor. Telegram is independently responsible for processing on the Telegram platform. You are responsible in particular for informing members (privacy sentence in the captcha message,
/privacy with PRIVACY_OPERATOR_NAME and PRIVACY_CONTACT filled in, privacy policy based on PRIVACY_TEMPLATE.md), limiting the retention of your host logs and handling data subject requests (e.g. access, erasure or objection). If you change settings or code, you are responsible for retention and deletion. Automated moderation: as shipped, the bot removes people who do not pass the check in time and lifts the ban immediately. Ban (ban) and mute (mute) are limited to a maximum of 24 hours (1440 minutes) (CAPTCHA_BAN_MAX_MINUTES and CAPTCHA_MUTE_MAX_MINUTES, each at most 1440); this limit can be lowered but not raised. The same applies to the lock period of the anti-raid mode (RAID_LOCK_MINUTES, at most 1440 minutes); when it expires, the bot lifts the media block for new members and the group lockdown (RAID_LOCKDOWN, off as shipped). The group lockdown also restricts existing members. Whether you switch it on is your decision; if you do, you inform your members about it, e.g. in the group rules and in your privacy policy. If the bot is not running when the lock period ends, or if restoring fails, the restrictions remain until the bot lifts them at its next start or in a later attempt, or until you reset the group permissions by hand (see README). If you set ban, mute or the group lockdown, you alone are responsible for this. We advise against changing the bot so that it automatically imposes bans, mutes or restrictions of group permissions longer than 24 hours or permanent ones. You alone are responsible for youth protection in your groups; the captcha is not an age or identity check, and we make no promise of suitability for any age group. - Review of outputs: Code and other outputs generated or modified with AI tools or based on the product may be incorrect, incomplete or insecure. Review them yourself before use, especially before using them in a group with real members.
- Liability: We are liable without limitation for intent and gross negligence, for injury to life, body or health, and under the German Product Liability Act. For slight negligence we are liable only for breach of an essential contractual obligation (cardinal duty), i.e. an obligation whose fulfilment makes proper performance of the contract possible in the first place and on whose observance you may regularly rely; in that case liability is limited to the typical, foreseeable damage. Your statutory rights in case of defects of digital products (§§ 327 et seq. BGB) remain unaffected.
- Withdrawal: See the information on the right of withdrawal at https://botnexio.com/widerruf/botnexio. If you have expressly agreed that we may begin providing the download before the withdrawal period ends and have acknowledged this, your right of withdrawal expires early when provision begins (§ 356(5) BGB). This is not a waiver of the right of withdrawal.
- Precedence of this licence: As regards your rights of use in the product, this licence takes precedence over the README, the other documentation, comments in the code and the product description. Your statutory rights, in particular in case of defects of digital products (§§ 327 et seq. BGB), and individual agreements remain unaffected.
- Law: German law applies, excluding the UN Convention on Contracts for the International Sale of Goods. Mandatory consumer protection provisions of the country of your habitual residence remain unaffected.
- Existing purchases and earlier versions: Your purchase is governed by the version of this licence stored with your order (licence version, e.g. in your order confirmation; on request to support@botnexio.com we will tell you which one). If no version is stored with your order, the version that applied at the time of your purchase applies. You keep the version of the product you bought. Later versions apply to you only if you agree to them.
*Not affiliated with Telegram. Telegram is a trademark of its owner.*
