Komnot does not read your conversations. It only looks at links and file fingerprints (hashes), never stores message text, and never sells personal information.

At a glance

We don't read your chats

Message text is not stored, analysed for profiling, or shown to anyone.

Files become a fingerprint

We calculate a file's hash to compare against known threats, then discard the file.

Only links are checked

We extract the URL or domain from a message and check its reputation.

Nothing is sold

We never sell, rent, or trade personal information or scan data.

1. Who we are and what this covers

Komnot is a Cambodian scam-protection service. This policy covers the Komnot Detect Telegram bot, the Komnot business dashboard, and this website (komnot.org). It applies whether you forward content to the bot, connect it through Telegram Chat Automation, or add it to a Telegram group.

2. How Komnot checks content

Komnot is built so it can protect you without reading what you say. When a message reaches the bot, it extracts only two things and ignores the rest:

Links — the URL or domain is checked against scam and phishing reputation sources.
Files — the file is held temporarily to calculate its fingerprint (a SHA-256 hash). Only the fingerprint is compared with known-threat databases; the file itself is then deleted and is not kept or shared.
Everything else — message text, stickers, voice notes, ordinary photos and messages you send — is not stored, read by people, or used for any other purpose.

3. Information we keep

Your Telegram user ID, and your display name or username if Telegram shares it, so the bot can reply to you and apply your plan.
Your settings: language, which checks are on, and alert preferences.
Scan records: the date, the type (link or file), the checked URL or file fingerprint, and the verdict (clean, suspicious or dangerous). These power your scan history, monthly report, and plan limits.
For groups: the group ID, group name and bot settings, so Komnot can protect the group and produce the group report.
For paid plans and demo requests: the name, email and organisation details you give us, and records of payments.

4. What we never collect

The text of your private or group conversations.
Your contacts, phone number, or profile photo.
Your passwords, one-time codes, or bank details. Komnot will never ask for them — if someone claiming to be Komnot does, it is a scam.
The contents of files you receive. Only their fingerprint is used.

5. Chat Automation and groups

When you connect Komnot through Telegram Chat Automation, Telegram passes incoming messages in the chats you choose to the bot. Komnot applies the same rule: it extracts links and file fingerprints, discards the message, and only acts — warns or deletes — when something is dangerous. You choose which chats it can access, and you can stop it any time from the banner at the top of a chat or in Telegram settings.

In a group, Komnot needs admin rights only to delete dangerous messages and, on eligible plans, restrict accounts that share them. Group admins are responsible for letting members know the group is protected by Komnot.

6. Business dashboard

Organisations on the Business plan can see scan activity for their protected groups and chats: counts, verdicts, checked links and file fingerprints, and which Telegram accounts were sent dangerous content (the employee targeting report). The dashboard never shows message text. The organisation is responsible for informing its staff and having a lawful basis to use these reports.

7. Threat-intelligence services

To decide whether a link or file is dangerous, Komnot may look up the URL, domain, or file fingerprint with third-party threat-intelligence and reputation services. We send only that link or fingerprint — never your message, your name, or the file itself.

8. How we use information

Check links and files and send you a clear verdict in Khmer or English.
Warn you, and delete dangerous messages when you have turned that on.
Count scans against your plan, and produce your history and monthly reports.
Improve detection using anonymised threat data, such as which scam domains are trending in Cambodia.
Answer support, billing and demo requests.

9. Sharing

We do not sell personal information. We share data only with service providers that run Komnot for us (hosting, payments, threat lookups), with your organisation's dashboard if you are protected under its Business plan, or when the law requires it. Aggregated, anonymised statistics — for example, the number of scams found in a month — may be published to raise public awareness.

10. How long we keep data

Scan records are kept for as long as needed to provide your history and reports, and are then deleted or anonymised. Account and billing records are kept while you use Komnot and afterwards only as long as the law requires. Temporary files used to calculate a fingerprint are deleted immediately after the check.

11. Your choices

Turn individual checks and alerts on or off with /settings.
Stop Chat Automation, remove the bot from a group, or block the bot at any time.
Ask us to access, correct, or delete your data by emailing komnotcambodia@gmail.com.

12. Security

We use encryption in transit, access controls, and minimal data collection to protect information. No online service can be perfectly secure, so please report anything suspicious to us.

13. This website

You can browse komnot.org without an account. It remembers your language and theme choice in your browser and uses privacy-friendly analytics to count visits. The demo form opens your own email app; the website itself does not store what you write.

14. Children

Komnot follows Telegram's minimum age. A parent or guardian who believes a child has shared personal information with us can contact us to remove it.

15. Changes and contact

We will update the date at the top of this page when this policy changes, and announce important changes in the bot. For any privacy question, email komnotcambodia@gmail.com.