A private AI agent on Telegram, from a French company, for $20/mo.
Same price as ChatGPT Plus. None of the “your messages train our models” risk. None of the OpenClaw install hell. Subscribe, connect Telegram, ship.
Why this exists
ChatGPT Plus is brilliant. It also runs in US datacenters where the operator can technically read your messages, and where “don’t train on my data” is a policy toggle rather than a hardware guarantee. For most uses that’s fine. For a lawyer pasting a contract, an accountant pasting a tax return, or a clinician pasting a patient note, that’s a regulator’s dream and your nightmare.
OpenClaw solves the trust problem by letting you run an agent locally with your own keys. But the install is brutal: a specific Node version, nvm, terminal access, hand-edited JSON config, BYO LLM API key, 92 plugins loading on cold start. The README literally tells non-technical users to walk away. Hundreds of thousands of GitHub stars, a tiny fraction of finished installs.
From zero to chatting in 3 minutes
No CLI. No config file. No Node version manager. The hosted version exists precisely because the self-host path eats hours and a meaningful fraction of would-be users never finish.
Subscribe
Plus tier, $20/mo via Stripe. Cancel anytime.
voltagegpu.com/confidential-agent → SubscribeConnect Telegram
Click the deep link in your dashboard. Telegram opens. One tap binds your account.
t.me/VoltageGPUPersonalBot?start=<your-token>Start chatting
Send any message. The model runs inside an Intel TDX enclave at our inference provider.
Send your first messageEight things you’ll actually use
Every example below is a real Telegram exchange. The bot replies with markdown (bold, code blocks, lists) so the formatting survives in your chat history.
Long-form drafts
Contracts, briefs, reports, proposals. Paste your inputs, get a structured first draft.
Document analysis
Paste the text into the chat (the bot reads text messages only). Ask anything, summary, risks, missing clauses, contradictions.
Email drafting
Reply to a paste. Tone control: formal, friendly, firm. Translate as you draft.
Code review & generation
Paste code, get a review. Describe what you want, get a working snippet. SQL, Python, TS, Go, Rust.
Research with citations
Ask a real question. Get a structured answer with source links. Web access via search plugin.
Translation (12 languages)
Between EN/FR/DE/ES/IT/PT/RU/JA/KO/ZH/AR/HI, with attention to tone and legal terminology.
Conversational memory
Remembers previous messages in the same chat. Pick up where you left off without re-explaining.
Always-on context
What’s the break-even for your role?
The honest answer: if the agent saves you more than 8 minutes a month at any professional rate, you’re ahead. Move the sliders to your reality.
ROI calculator
Drag the sliders. Math is live.
vs ChatGPT Plus & self-hosting OpenClaw
Three options sit in the same price bracket. Here’s the trade-off matrix.
| ChatGPT Plus | Self-host OpenClaw | Confidential Agent | |
|---|---|---|---|
| Monthly cost | $20 | $0 + your LLM API costs | $20 |
| Setup time | ~2 min | Hours (often abandoned) | ~3 min |
| Memory protected from the host | No | Yes (your hardware) | Model host only (Intel TDX) |
| Trains on your conversations | Policy toggle | Never | No (our policy) |
| Data residency | US | Wherever you run it | French company; GPU sub-processors in the US (SCCs) |
| Telegram interface | No | Build it yourself | Native |
| Plugins / tools | OpenAI app store | 92 plugins (full ecosystem) | Curated subset |
| Local file access | No | Yes | No (the agent is remote) |
| GDPR Art. 28 DPA | Generic | You are the processor | Yes (French controller) |
| Maintenance burden | None | Updates, plugins, model swaps, you | None |
Honest take: if your work hinges on a 92-plugin ecosystem and direct local file access, self-hosting wins. For everyone else, especially anyone who handles client personal data, the hosted Confidential Agent removes the install, with the model in Intel TDX; your messages do pass through our servers.
Why “Intel TDX” is more than a buzzword
Software-encrypted services protect data at rest (on disk) and in transit (over the network). But during inference, data must be decrypted in memory, where any sysadmin with root can technically read it. Most cloud providers are honest, careful, and won’t. But “won’t” is a policy. “Can’t” is a guarantee.
Intel Trust Domain Extensions (TDX) add a third state: encryption in use. The CPU generates encryption keys that no software, not the hypervisor, not the BIOS, not the host OS, can access. Memory pages used by the enclave are encrypted by the CPU at the hardware level. trust-domain GPU isolation extends this to the GPU.
What you can check yourself: the CPU signs a quote of the trust domain's measurements, which you verify against Intel's root and compare with the measurements of your own earlier runs. We do not publish reference values per image; what a quote proves, and what it does not, is explained field by field in Read an Intel TDX quote.
Verify it yourself: step-by-step attestation guide.
Questions people actually ask
How is this different from ChatGPT Plus?
Same price. Different threat model. ChatGPT Plus runs in the US on shared infrastructure, operators can technically read memory, and conversations train the model unless you toggle off. Our agent runs on our server with the model inside an Intel TDX enclave at our inference provider, under a French controller. Your messages are stored in our Postgres database and read by our worker, so VoltageGPU staff can technically read them.
How is this different from self-hosting OpenClaw?
OpenClaw self-hosting requires nvm, a specific Node version (24.22.1 or newer for the npm release 2026.10.8), terminal access, JSON config with no schema validation, and your own LLM API key. Cold start loads 92 plugins (~90s). Our hosted version skips all of that, subscribe, connect Telegram, done. You lose direct local file access but gain instant setup, inference in an Intel TDX enclave, and zero maintenance.
What model runs under the hood?
A TEE model from our catalog, set on our agent server. The "-TEE" suffix means it runs inside a Trusted Execution Environment (Intel TDX). We have not published our own latency or overhead measurement; a third-party benchmark of NVIDIA Hopper confidential mode reports an overhead below 7% for most typical LLM queries (arXiv 2409.03992).
Will my conversations be used for training?
No. We do not train models on your messages. They are stored in our Postgres database and read by our worker to answer you; only the model runs inside an Intel TDX enclave.
What is the realistic ROI for a professional?
We publish no measured figure. Use the calculator above with your own hours and your own billable rate.
Can it access the internet? My local files? My email?
Internet: yes, via search plugin (curated, audited). Local files: no, the agent is remote, it cannot reach your laptop. Email: no.
What languages does it speak?
Twelve native: EN, FR, DE, ES, IT, PT, RU, JA, KO, ZH, AR, HI. Mixed languages in one conversation work, it auto-detects per message.
Is there an API or just Telegram?
Telegram is the primary interface for the Plus tier ($20/mo). Direct OpenAI-compatible API access is available on the Confidential Inference plan (separate product, usage-based pricing).
What if I cancel?
Stripe self-serve. Cancel from the billing portal; access continues until the end of the period.
Why Telegram and not WhatsApp / Signal?
Telegram has the cleanest bot API and good support for long messages; our bot reads text messages only. WhatsApp Business API is heavily gated by Meta. Signal does not support bots. We use Telegram for the interface; your messages go to our web app and our server, and the model runs in an Intel TDX enclave at our inference provider, not on Telegram servers.
Try it for the price of a ChatGPT Plus subscription
Same $20/mo. Stripe self-serve. Cancel anytime from the billing portal.