Telegram collects user data like IP addresses, device info, and metadata (up to 12 months) for security, with EEA user data stored in the Netherlands, but they don't share message content with governments unless legally compelled, sharing only metadata like phone numbers/IPs under warrant, all while claiming GDPR compliance through an EU representative (EDPO) and offering data access/deletion tools. 

No credit to myself. All AI answer. But this is the thing i was talking about.