Privacy Policy

1. Overview

BotBuilder ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and protect your information when you use our Service at aichatbotbuilder.ohitis.shop.

By using BotBuilder, you agree to the collection and use of information as described in this policy.

2. Information We Collect

Information you provide directly:

• Account information — name, email address, password (stored as a secure bcrypt hash)
• Business information — business name, description, FAQs, and knowledge base content you enter to train your chatbot
• Payment information — handled entirely by Stripe. We never see or store your card details

Information collected automatically:

• Usage data — pages visited, features used, chatbot performance metrics
• IP address — used for rate limiting and security purposes only
• Session data — stored in a secure, HttpOnly cookie for authentication

Visitor data (collected by your chatbot widget):

• Chat messages sent by visitors to your embedded chatbot
• Name and email address if lead capture is enabled on your chatbot
• A random visitor ID (not linked to personal identity)

As a BotBuilder user, you are the data controller for your visitors' data. You are responsible for disclosing chatbot data collection in your own privacy policy.

3. How We Use Your Information

• To provide and maintain the BotBuilder Service
• To authenticate your account and keep it secure
• To process payments and manage your subscription via Stripe
• To send transactional emails (password resets, welcome emails) via Resend
• To generate AI chatbot responses using your knowledge base via Claude AI (Anthropic)
• To analyse usage patterns and improve the Service
• To enforce our Terms of Service and prevent abuse

We do not sell your personal data to third parties. We do not use your data to train AI models.

4. Third-Party Services

We use the following third-party services to operate BotBuilder. Each has its own privacy policy:

5. Data Storage and Security

• Your data is stored on secure servers hosted by Railway (database) and Vercel (application)
• Passwords are hashed using bcrypt and are never stored in plain text
• Sessions use signed JWT tokens stored in HttpOnly, Secure cookies
• All data is transmitted over HTTPS/TLS encryption
• We use industry-standard security practices but cannot guarantee 100% security

6. Data Retention

• Account data is retained while your account is active
• After account deletion or termination, data is deleted within 30 days
• Chat conversation logs are retained for 90 days to provide analytics features
• Password reset tokens expire after 15 minutes

7. Cookies

We use a single essential cookie:

8. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access — request a copy of the data we hold about you
• Correction — update inaccurate data (available in Account settings)
• Deletion — request deletion of your account and associated data
• Portability — export your chatbot conversations via the CSV export feature
• Objection — object to certain types of data processing

To exercise any of these rights, contact us at avishkunwar00@gmail.com.

9. Children's Privacy

BotBuilder is not intended for use by anyone under 16 years of age. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by posting a notice on our website. The updated date at the top of this page reflects the latest revision.

11. Contact Us

If you have questions or concerns about this Privacy Policy or how we handle your data, please contact us: