Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how Botable ("Company," "we," "us," or "our") collects, uses, discloses, and protects your personal information when you access or use the Botable platform, website, and related services (collectively, the "Service"). This Policy applies to all users of the Service, including bot creators and administrators.

By using the Service, you consent to the data practices described in this Policy. If you do not agree with this Policy, please do not use the Service. This Policy should be read in conjunction with our Terms of Service.

2. Information We Collect

2.1 Information You Provide

• Account information: Name, email address, and profile details provided during registration through our authentication provider (Clerk).
• Bot configuration: Descriptions, instructions, and configurations you provide when creating or modifying bots.
• Telegram Bot Tokens: API tokens you provide to connect your bots to the Telegram platform.
• Communications: Messages and interactions with our AI assistant during bot creation and modification.
• Payment information: Transaction data related to credit purchases processed through Telegram Stars. We do not directly store your payment card details.
• Support inquiries: Information you provide when contacting us for support.

2.2 Information Collected Automatically

• Usage data: Information about how you interact with the Service, including pages visited, features used, bot operations performed, and timestamps.
• Device information: Browser type, operating system, device type, screen resolution, and language preferences.
• Log data: IP addresses, access times, referring URLs, and other standard web server log information.
• Cookies and similar technologies: We use cookies, local storage, and similar technologies for authentication, preferences, and analytics. See Section 8 for details.

2.3 Bot Data

Each bot you create operates in an isolated environment with its own dedicated SQLite database. Data stored in your bot's database (including any data your bot collects from its end users) is your responsibility. We host this data on your behalf but do not access, analyze, or share it except as necessary to provide the Service, comply with legal obligations, or enforce our Terms.

3. How We Use Your Information

We use the information we collect for the following purposes:

• Providing the Service: To create, deploy, host, and manage your bots; to process your instructions; and to maintain your account.
• AI processing: Your bot descriptions and modification requests are sent to third-party AI providers (Anthropic) to generate and modify bot code. These interactions are processed in accordance with the AI provider's data handling policies.
• Billing and credits: To manage your credit balance, process transactions, and maintain billing records.
• Service improvement: To analyze usage patterns, diagnose technical issues, and improve the Service's features, performance, and reliability.
• Communication: To send you service-related notices, updates, security alerts, and support messages.
• Security: To detect, prevent, and address fraud, abuse, security incidents, and technical issues.
• Legal compliance: To comply with applicable laws, regulations, legal processes, or governmental requests.

4. How We Share Your Information

We do not sell your personal information. We may share your information in the following limited circumstances:

• Service providers: We share data with trusted third-party providers who assist in operating the Service, including:
  • Clerk (authentication and identity management)
  • Anthropic (AI processing for bot creation and modification)
  • MongoDB (database hosting for platform data)
  • Vercel (web hosting and deployment)
  • Telegram (bot API and payment processing)
• Legal requirements: When required by law, regulation, legal process, or governmental request, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
• Business transfers: In connection with a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.
• With your consent: We may share information for other purposes with your explicit consent.

5. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit using TLS/SSL.
• Isolated bot environments with dedicated databases.
• Secure storage of sensitive credentials (such as bot tokens), which are never exposed in the user interface.
• Access controls and authentication via Clerk.
• Regular security reviews of our infrastructure.

While we strive to protect your information, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security and are not responsible for unauthorized access resulting from circumstances beyond our reasonable control.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. Specific retention periods include:

• Account data: Retained for the duration of your account and deleted within 30 days of account termination.
• Bot data and files: Retained while your account is active. Upon account deletion or bot removal, data is permanently deleted within 30 days.
• Conversation history: AI interaction logs are retained to provide context for ongoing bot modifications and are deleted with your account.
• Billing records: Retained for the period required by applicable tax and accounting laws.
• Log data: Automatically purged after 90 days.

7. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request correction of inaccurate or incomplete personal information.
• Deletion: Request deletion of your personal information, subject to legal retention obligations.
• Portability: Request your data in a structured, commonly used, machine-readable format.
• Restriction: Request that we restrict the processing of your personal information in certain circumstances.
• Objection: Object to the processing of your personal information for certain purposes.
• Withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us using the information in Section 12. We will respond to your request within 30 days or as required by applicable law.

8. Cookies and Tracking Technologies

We use the following types of cookies and similar technologies:

• Essential cookies: Required for authentication, security, and core Service functionality. These cannot be disabled.
• Functional cookies: Used to remember your preferences and settings (such as theme and language).
• Analytics cookies: Used to understand how users interact with the Service and to improve performance. We may use third-party analytics providers.

You can manage cookie preferences through your browser settings. Disabling essential cookies may affect the functionality of the Service.

9. International Data Transfers

Your information may be transferred to, stored, and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your jurisdiction. By using the Service, you consent to the transfer of your information to these countries. We take appropriate safeguards to ensure that your personal information remains protected in accordance with this Policy and applicable data protection laws.

10. Children's Privacy

The Service is not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If we become aware that we have inadvertently collected personal information from a child under 16, we will take steps to delete such information promptly. If you believe we may have collected information from a child under 16, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. Material changes will be communicated through the Service or via email at least 14 days before they take effect. The "Effective date" at the top of this Policy indicates when it was last revised. Your continued use of the Service after any changes constitutes your acceptance of the updated Policy.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Telegram: @botableTech
• Email: support@botable.ai

If you are located in the European Economic Area and believe your data protection rights have been violated, you have the right to lodge a complaint with your local supervisory authority.