A Telegram bot is a program that runs on the developer's own server and talks to users through Telegram's Bot API, and Telegram says more than 10 million of them exist. An AI bot is the same thing with a language model behind it: the bot receives the user's message, usually passes the text to a model, and sends the answer back. Bot chats use Telegram's cloud encryption, not end-to-end encryption, so the bot's operator can read what is sent to it.
Key takeaways
- Every bot is registered through Telegram's BotFather, which issues a token; anyone who holds the token controls the bot.
- Telegram's Bot API is a documented HTTPS interface with fixed limits on message rates and file sizes.
- Only one-on-one Secret Chats are end-to-end encrypted, and bot chats are not among them.
- Telegram describes third-party bots as independent of the company, so each bot's own privacy practices matter.
- Bot API 10.1, released June 11, 2026, added support for streamed, AI-style replies.
How a Telegram bot is built and registered
Developers create a bot by messaging an account called BotFather inside Telegram. BotFather returns an authentication token, and Telegram's bot documentation warns that the token is the bot's identifier and that whoever holds it has full control of the bot. A bot account does not need a phone number, and the platform is free for users and developers.
The bot itself is ordinary software running on the developer's infrastructure. It talks to Telegram over the Bot API, an HTTPS interface. Updates can arrive by long polling, where the program repeatedly asks for new messages (up to 100 unconfirmed updates per request), or by webhook, where Telegram sends each update to a web address with a valid certificate on port 443, 80, 88, or 8443. The two methods cannot run at the same time for one bot.
Several rules shape what a bot can do. A bot cannot start a conversation: a user has to message it first or add it to a group. Bots show a "bot" label instead of an online status. They may upload files up to 50 MB and download files up to 20 MB through the standard API.
Where AI enters the picture
Telegram does not build the language model into the bot platform. An AI bot is a developer's program that calls a model, either one the developer hosts or one offered by an outside provider through its own interface. This is an architectural description, not a statement about any named product, and the details differ from bot to bot.
The Bot API has gained features that suit this pattern. Bot API 10.1, dated June 11, 2026, introduced rich messages and support for streaming replies as they are generated. Bot API 10.3, dated August 24, 2026, added the ability to stop message generation. The same documentation says AI bots can join chats and stream responses in real time. Because the changelog moves quickly, any feature list older than a few months should be checked against the current version.
Rate limits apply to AI bots as well. In a single chat, the FAQ advises no more than one message per second, and in groups no more than 20 messages per minute. Bulk notifications should stay near 30 per second unless paid broadcasts are switched on. A bot that streams a long answer by editing one message repeatedly can run into these limits.
What a bot developer can and cannot see
The table below summarizes the data rules stated in Telegram's FAQ and privacy policy. It describes the default design, and individual bots can collect more through their own sign-up forms or linked websites.
| Situation | What the bot can receive | Source of the rule |
|---|---|---|
| A user messages the bot privately | All messages sent to it, plus public account details such as display name, username, and profile photo | Privacy policy, section on bots |
| The bot is in a group with privacy mode on | Commands, replies to the bot, and messages sent through it | Bot FAQ |
| The bot is in a group with privacy mode off, or is an admin | Nearly all group messages, except those from other bots | Bot FAQ |
| A user taps a link or button that opens a site the bot controls | Possibly the user's IP address | Privacy policy |
| A user pays through the bot | Shipping details go to the developer; card details go to the payment service | Privacy policy |
Encryption: what the term does and does not cover
Telegram's FAQ separates two kinds of chats. Cloud chats, which include private and group chats, use server-client encryption and are stored encrypted so they sync across devices. Secret Chats add client-to-client encryption, but they are one-on-one chats between two people. The FAQ says bots can see the messages sent to them, which is expected, since a bot has to read a message to answer it.
For an AI bot, one more hop follows. If the developer forwards the text to a model provider, that provider's terms and retention practices apply to the same message. Telegram's privacy policy says third-party bots are independent of Telegram and must ask permission before accessing a user's data. A reader who plans to share anything sensitive with a bot can check four things first: who runs it, what its privacy notice says, whether it names the model provider, and whether chat history can be deleted.
Practical checks before using or building an AI bot
- Find the operator's name and contact details in the bot's description or linked site.
- Read what the bot says about logging, storage, and sharing with model providers.
- Keep health, financial, and identity details out of chats with bots whose operators are unknown.
- For developers: store the BotFather token outside source code and rotate it if it leaks.
- For developers: treat any group message as personal data and keep privacy mode on unless full access is needed.
FAQ
Is a Telegram bot the same as Telegram's own features?
No. Bots are separate programs run by outside developers. Telegram provides the interface and rules, while the bot's logic, storage, and any AI model belong to the developer.
Can a bot read every message in a group?
Only if privacy mode is disabled or the bot is an administrator. With privacy mode on, a bot sees commands, replies to it, and messages sent through it.
Are chats with a bot end-to-end encrypted?
No. End-to-end encryption in Telegram applies to one-on-one Secret Chats. Bot chats are cloud chats, and the bot receives the content in readable form.
Does it cost anything to run a bot?
Telegram says the platform is free for developers and users. Hosting, model usage, and any paid broadcast fees are separate costs set by the developer's providers and by Telegram's broadcast rules.
Related reading
- AI bots on Telegram
- Building a GPT-based Telegram chatbot
- Cocoon, the decentralized AI network on TON
- The Notcoin bot and its tokens
More in AI Tools and Industry.
Last verified: October 2026
Sources
- Bots: An introduction for developers, Telegram, 2026
- Bots FAQ, Telegram, 2026
- Bot API changelog (versions 10.1 to 10.3), Telegram, 2026
- Telegram FAQ, section on encryption, Telegram, 2026
- Telegram Privacy Policy, section on bots and payments, Telegram, 2026
- End-to-end encrypted Secret Chats, Telegram API documentation, 2026