Privacy Policy

Version of 15 November 2026

What data BotBot receives, why, where it is kept and how to delete it.

1. General provisions

1.1. This Policy sets out how personal data of users of the BotBot online service (the “Service”) is collected, processed, stored and protected: the @botbot_ai chatbot in a messenger, its app (Mini App), the web version at botbotai.app/app, the phone and computer apps, helper bots and the botbotai.app website.

1.2. Personal data is processed in accordance with this Policy and applicable law.

1.3. By using the Service, the User confirms that they have read this Policy.

2. Data processed

2.1. Depending on the features used, the Service may process:

• sign-in data: with Google, the Google account id, email address and name; with the messenger, its id, name, username and language; the chosen language and time zone;
• subscription and payment details: plan, dates, status, payment ids;
• tasks and messages the User sends the helper, including files, photos and voice messages, and the helper’s answers. A copy of the chats with the helpers and the files the helper sends are kept on the Service’s servers, so that the same chat shows in the messenger and in the web version;
• what the User saves: helpers’ memory, skills, regular tasks, files on their computer;
• Vault records (logins, passwords, 2FA codes, keys) and sign-ins to connected services, if the User added them;
• sign-ins to the web version and the apps: the device name, platform, time of sign-in and of last use; in the phone app also the push notification token;
• technical data: IP addresses of the User’s computer, Service logs;
• signals from other services for tasks “on a signal” (webhooks) the User connected: what the service sent is kept on the Service’s servers as a task for the helper and passed to the User’s computer; the signal log (time, size, outcome) is kept for 7 days;
• web pages the helper made, at the User’s request, from a folder on their computer: the page’s files are kept on the Service’s servers until the User deletes the page; only the User can open it;
• support requests and “Something wrong?” reports.

2.2. The Service does not ask for bank card details. The Service does not ask for passwords in the chat: the User enters them in the Vault or on their computer’s screen.

3. Purposes of processing

3.1. Data is processed in order to:

• do the User’s tasks and provide the Service;
• identify the User;
• take payment and manage the subscription;
• provide support;
• keep the Service secure and prevent fraud and abuse;
• improve the Service;
• comply with legal requirements.

4. Legal grounds

4.1. Data is processed on the basis of the User’s consent, the need to perform the User Agreement, legal requirements and other lawful grounds.

5. Sharing data with third parties

5.1. The Service does not sell personal data and does not use it for advertising.

5.2. Data is shared with service providers to the extent needed for the Service to work:

• Google — signing in with Google, if the User chooses it: Google gives the Service the account id, email address and name;
• the messenger — chats with the bot, if the User has connected the messenger;
• an email delivery service — the User’s email address and the letter’s text (about payments, the subscription, support answers);
• payment providers — taking payments;
• hosting providers — hosting users’ computers and the Service’s servers and storage;
• AI providers — the task text and the materials it needs. If your AI is connected, data goes under the User’s own account and the provider’s rules;
• an intermediary service for connecting Google (Gmail, Google Calendar, Google Drive) — if the User connected them: it keeps the sign-in to the Google account and carries out the helper’s actions there;
• the push notification delivery service — the device token and a short notification text without the content of tasks;
• websites and services the helper works with for the User’s task — to the extent of that task.

5.3. Voice messages are transcribed on the User’s computer and are not sent to third parties for this.

5.4. Data is disclosed to public authorities only in the cases and manner provided by applicable law.

6. Payment data

6.1. Bank cards and other payment details are processed directly by a third-party payment provider.

6.2. The Service does not receive or store bank card details. It keeps only payment records: amount, date, status and id.

7. Storage and protection

7.1. Data is kept while the User has an account, or for the period set by law.

7.2. Vault records and service sign-ins are stored encrypted. Access to servers is restricted and connections are protected.

7.3. When the subscription ends, the User’s computer is switched off and deleted after 7 days; the working folder is kept in storage until renewal or account deletion.

7.4. Database backups are kept for up to 30 days and deleted automatically.

7.5. The botbotai.app website uses no counters or ad trackers. Cookies are used only where the Service cannot work without them: to sign in to the web version and to connect services.

7.6. So that the free trial can be taken only once, the Service keeps hashes made with a secret key of the ids of the ways of signing in (the Google account, the messenger account; no name, email or other data) and the trial dates; they stay after the account is deleted. When a trial ends without a subscription, the computer is deleted right away, and the working folder is kept for 7 days and then deleted.

7.7. The copy of the chats with the helpers and the files the helper sends are kept while the User has an account.

7.8. To handle abuse complaints, the Service keeps which account used which network address of a computer and when, for 6 months, also after the account is deleted (then a hash made with a secret key of the sign-in id is kept instead of the account). The Service also watches the overall load of the computers: CPU, the number of network packets and the amount of traffic, but not their content and not which websites the User opens.

8. User rights

8.1. The User may request access to their data, its correction or deletion, and exercise other rights provided by law.

8.2. The User can view, change and delete memory, skills, tasks and Vault records themselves in the app.

8.3. The account is deleted in the app: “More → Subscription → Delete the account” (the /deleteaccount command opens it too), or on request to support, as described on the Deleting your account page. The computer, working folder, chats with the helpers and all account data are deleted immediately and permanently. Backups containing this data are deleted automatically within 30 days.

8.4. For other questions about data, the User may contact support at support@botbotai.app.

9. Changes to this Policy

9.1. The Service may change this Policy due to changes in the law, the Service’s features or the way data is processed.

9.2. The current version is published on botbotai.app.

10. Contact information

10.1. For questions about data processing and using the Service, the User may contact support at support@botbotai.app.