Bots
Who this is for: people who chat with bots, room admins who install workers, and anyone checking whether bots are end-to-end encrypted.
Developer API: Bot API · Worker bots · Console: developers.buzzio.dev
What it is
Buzzio lets third-party developers run bots. Buzzio delivers messages and enforces limits; the developer’s server writes what the bot says.
Two kinds — chosen once in Forge, never converted:
| Kind | Like | What you see | Where |
|---|---|---|---|
| Service bot | Telegram bot | Search @…bot, tap Start, chat |
1:1 dashboard with a Bot badge |
| Worker bot | Discord bot | Admin installs in a room | OHG / Community Bots tile — not people search |
Forge (@forge_bot) |
Official control bot | Create bots, tokens, rotate, delete | Labeled Official — Buzzio runs it |
You → Buzzio (delivery + short retention) → developer webhook
↑ |
└──────────── bot reply (sendMessage) ─────────┘
Hard exclusions: no bots in sealed person-to-person chat, Whisper private chat, Whisper Questions, or E2E groups.
How to use (users)
Chat with a service bot
- Search the bot’s
@username(handles end inbot). Draft / rejected / paused bots do not appear. - Open the profile. You should see a Bot badge (Forge shows Official).
- Tap Start (Buzzio’s button — same word on every bot). Accept Bot Terms if prompted.
- Buzzio sends a platform
/startevent to the developer. Their welcome text is whatever their code replies. - Send more text. Each message is delivered to their server so they can answer.
- Optional: Report or hide the bot — Safety.
Media a bot sends is usually an HTTPS URL the developer hosts. Your phone loads the file from them; Buzzio stores the link, not those outbound bytes. A file you send to a bot may be stored by Buzzio (currently up to 2 MB) for about 7 days so the bot can fetch it.
Install a worker (admins)
- Open an open-history group or Community → Bots.
- Look up
@mod_bot(workers are not in people search). - Pick OHG permission ticks or Community roles → send a request.
- The developer Accepts on developers.buzzio.dev (Requests). Pending ≠ installed.
- After accept, the room shows a privacy label that a worker can read allowed messages.
Platform slash (admins only; never forwarded to the worker):
/bots
/bots list
/bots add username
/bots remove username
/bots perm username <grant> on|off
Members who type /bots get an admin-only message; that text is not sent to the room as a normal post.
Privacy strip
| Property | Status |
|---|---|
| Content E2EE | No — bot chat is cloud / shared by design |
| Zero durable chat metadata | Does not apply |
| Who can read your text | Buzzio (while retained) + the bot developer’s server |
| Buzzio text retention | About 7 days, then purged from Buzzio servers |
| Local bubbles on your phone | May remain until you clear the chat |
| Bot → you media bytes on Buzzio | No — URL only; phone fetches from the developer |
| You → bot file bytes on Buzzio | Yes, currently up to 2 MB, for about 7 days |
| Pending webhook / getUpdates copies | About 24 hours |
| Webhook delivery logs | Last ~100 per bot; payload can contain text until rotated/deleted |
| Scheduled bot messages | Until sent or cancelled, up to 30 days |
| Sold as ads data? | Never |
Banner expectation (every bot / Forge chat):
This chat is not end-to-end encrypted. The bot developer’s server can receive what you type.
Do not send recovery phrases, passwords, payment secrets, or anything you would not give that developer.
Legal: Bot Terms · Bot Privacy · hub: Legal and policies
What happens to your data
| Piece | Buzzio | Developer |
|---|---|---|
| Message text | Kept ~7 days, then deleted from our servers | Receives each delivery on their webhook; their copy is their job |
| Bot → you media file | Not downloaded / not hosted | File stays on their HTTPS origin |
| You → bot file | Stored up to 2 MB for ~7 days so the bot can fetch it | May be downloaded and retained under the developer's policy |
| Thread metadata (you started this bot, last activity) | Small row while the thread / account exists | — |
| Report snapshot | May keep recent text for safety review past the 7-day window | — |
Clearing the chat removes the local copy. Reinstalling only restores text still within Buzzio’s retention window.
Forge (developers on the phone)
Forge is Buzzio’s official manager bot. Its brain runs on Buzzio — not a third-party webhook.
- Search
@forge_botand open Forge chat. - Read the official / not-E2E banner.
- Use guided commands:
| Command | Job |
|---|---|
/start |
What Forge is, terms, link to the website, plan status |
/newbot |
Display name → @username (must end in bot) → choose Service or Worker → API token for 5 minutes, then the message vanishes |
/mybots |
Your bots: state, plan, expiry |
/stats |
Aggregate counts only (unique users, messages in/out, webhook errors) — not other people’s profiles |
/@weather_bot api reset |
New API token (the bot’s password). Old token dies; Console on developers.buzzio.dev signs out; new token vanishes in 5 minutes |
/token weather_bot |
Same as api reset |
/status |
Draft / testing / submitted / approved / rejected / shadow-banned |
/plan / /renew |
Quota and web checkout link (no seed on the website) |
/deletebot |
Confirm delete |
/help |
Command list |
Create on the phone (owner = Buzzio ID). Connect code on the desktop site with the token. Seed never goes to developers.buzzio.dev.
Bot lifecycle (what users / owners see)
| State | In search? | Users can Start? |
|---|---|---|
| Draft / testing / submitted | No | No |
| Approved + active plan | Yes, Bot badge | Yes |
| Rejected | No | No — fix webhook, submit again |
| Shadow-banned (e.g. plan expired) | No | Existing thread may show paused |
| Suspended (abuse) | No | Offline |
Username rules (product): ends in bot; unique across people and bots; reserved prefixes such as buzzio_, forge_, support_ are blocked.
Safety
- Report works on bot chats the same job as 1:1 — Safety.
- Buzzio may pause, suspend, or delete a bot, or act on the owner’s Buzzio ID (all their bots).
- Developers must not use bots for scams, CSAM, phishing, or other Bot Terms violations.
Limits and honest ceilings
- Users can send text and supported files (currently up to 2 MB); bots may reply with text or developer-hosted media URLs.
- Bot premium is not offered. Membership-flag, checkout, and paid-access API names return 404.
- Workers only act after Console Accept and only with granted permissions. Workers cannot get Community
administrator/manage_roles. - If the developer’s server is down, the bot is down. Forge stays up.
- Full HTTP surface: Bot API · room tools: Worker bots.
Troubleshooting
| Symptom | Try |
|---|---|
| Bot not in search | Not approved, plan expired / shadow-banned, or wrong username |
| Start works but no reply | Developer server / webhook down — report if it looks abandoned or abusive |
| Worker never appears in room | Request still Pending — developer must Accept on Console |
/bots does nothing useful |
You are not an admin, or you are in an E2E / sealed surface (workers not allowed) |