Botu

Privacy Statement

Data Storage, Retention, and International Transfers

Where Your Data is Stored

Your personal information is securely stored on Microsoft Azure cloud servers located in Sweden. We chose this location to ensure:

  • Strong data protection laws under European GDPR standards
  • Geographic proximity to reduce latency for European users
  • High security standards with enterprise-grade data center facilities
  • Environmental responsibility through renewable energy-powered infrastructure

Data Retention Periods

We retain your information for different periods based on the type of data:

  • Account Information: Retained while your account is active, plus 3 years after account closure
  • Conversation Logs: Stored for 2 years to improve service quality and provide support
  • Messenger Platform Data: Conversation logs from integrations retained for 1 year unless longer retention is requested by the business customer
  • Usage Analytics: Anonymized and retained for up to 5 years for business analysis
  • Support Communications: Kept for 3 years to maintain service continuity
  • Billing Records: Retained for 7 years as required by financial regulations

International Data Transfers

While our primary servers are in Sweden, we may transfer data to other locations for:

  • Technical support and maintenance
  • Integration with third-party services
  • Backup and disaster recovery

All international transfers are protected by:

  • Standard Contractual Clauses approved by the European Commission
  • Adequacy decisions where applicable
  • Additional security measures to protect data in transit

Messenger Platform Integrations

How Integrations Work

Botu integrates with popular messaging platforms to provide seamless chatbot experiences. When you interact with a Botu-powered chatbot through these platforms, both Botu and the messaging platform may collect and process your information.

Platform-Specific Data Handling

Facebook Messenger & Instagram Direct Messages

  • Data Collected: User ID, profile name, profile picture, message content, timestamps
  • Facebook's Role: Facebook processes data according to their own privacy policy
  • Our Role: We only access data necessary for chatbot responses and conversation continuity
  • Data Sharing: Message content is processed by our AI systems but not stored permanently unless needed for ongoing conversations

WhatsApp Business API

  • Data Collected: Phone number, message content, media files, delivery status
  • WhatsApp's Role: End-to-end encryption protects message content in transit
  • Our Role: We process messages to provide automated responses and customer support
  • Data Retention: Conversation logs may be retained for quality assurance and service improvement

Telegram Bot API

  • Data Collected: User ID, username (if public), message content, bot commands
  • Telegram's Role: Telegram processes data according to their privacy policy
  • Our Role: We process interactions to provide bot functionality and responses
  • User Control: Users can delete conversations directly through Telegram

Your Rights Across Platforms

  • Message Deletion: You can delete messages on the respective platforms, though this may not remove data from our conversation logs immediately
  • Account Disconnection: You can stop interactions with our chatbots at any time by blocking or unsubscribing
  • Data Requests: Contact us to request deletion of conversation data from our systems
  • Platform Settings: Use platform-specific privacy settings to control data sharing

Botu is designed for business use and is not intended for children under 16. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child, we will take immediate steps to delete that information.

Regional Privacy Laws

European Users (GDPR)

If you are located in the European Union, European Economic Area, or United Kingdom, you have additional rights under the General Data Protection Regulation (GDPR):

  • Enhanced right to information about data processing
  • Right to lodge complaints with your local data protection authority
  • Specific protections for automated decision-making -# Privacy Statement

Introduction

Botu is an innovative AI chatbot platform headquartered in Tbilisi, Georgia. We help businesses enhance their customer support, streamline user engagement, and automate interactions through intelligent conversational AI. We understand that privacy is fundamental to building trust with our users, and we are committed to protecting your personal information.

This privacy statement explains what information we collect, how we use it, and what rights you have regarding your personal data. We believe in transparency and will always be clear about our data practices.

Information We Collect

Personal Information

When you use our services, we may collect:

  • Full name and email address
  • Company name and job title
  • Phone number (when provided)
  • Account credentials and profile information
  • Billing and payment information
  • Communications you send to us

Automatically Collected Information

Our platform automatically collects certain technical information:

  • IP address and general location
  • Browser type, version, and language settings
  • Operating system and device information
  • Pages visited and time spent on our platform
  • Usage patterns and feature interactions
  • Cookies and similar tracking technologies

Chatbot Interaction Data

When you interact with Botu-powered chatbots:

  • Conversation logs and message content
  • User preferences and settings
  • Response times and engagement metrics
  • Integration data from connected platforms

Messenger Platform Integration Data

When Botu chatbots are integrated with messaging platforms, we may collect:

  • Facebook Messenger: User ID, profile information (name, profile picture), message content, and interaction timestamps
  • WhatsApp Business: Phone number, message content, media files shared, and delivery status
  • Telegram: User ID, username, message content, and bot interaction data
  • Instagram Direct Messages: User ID, message content, and engagement metrics
  • Other Messaging Platforms: Similar data as required for chatbot functionality and user experience optimization

How We Use Your Information

Service Delivery

We use your personal information to:

  • Create and manage your Botu account
  • Provide access to our AI chatbot platform and features
  • Process payments and manage billing
  • Deliver customer support and respond to your inquiries
  • Send important service notifications and updates
  • Facilitate integrations with your existing business tools
  • Enable chatbot functionality across messaging platforms (Facebook Messenger, WhatsApp, Telegram, Instagram, etc.)
  • Synchronize conversations and user data across different channels

Platform Improvement

Your data helps us enhance our services by:

  • Analyzing usage patterns to identify popular features
  • Optimizing chatbot performance and response accuracy
  • Developing new features based on user needs
  • Conducting security monitoring and fraud prevention
  • Performing system maintenance and troubleshooting

Communication

We may use your contact information to:

  • Send welcome emails and onboarding materials
  • Provide product updates and feature announcements
  • Share educational content and best practices
  • Conduct user research and feedback surveys (with your consent)
  • Send promotional materials (you can opt out anytime)

Data Protection and Security

Technical Safeguards

We implement comprehensive security measures including:

  • End-to-end encryption for all data transmission and storage
  • Advanced access controls with role-based permissions and multi-factor authentication
  • Regular security audits conducted by independent third-party experts
  • Automated backup systems with secure, geographically distributed storage
  • Real-time monitoring for suspicious activities and potential security threats
  • Data anonymization techniques to protect sensitive information

Infrastructure Security

  • Cloud hosting on Microsoft Azure Sweden data centers with enterprise-grade security
  • Network security with firewalls, intrusion detection, and DDoS protection
  • Physical security measures at all data center locations
  • Compliance certifications including ISO 27001 and SOC 2 Type II standards
  • Regular penetration testing to identify and address vulnerabilities

Data Handling Policies

  • All employees undergo mandatory privacy and security training
  • Strict data access policies limit information to authorized personnel only
  • Regular reviews of data processing activities and security procedures
  • Incident response procedures for any potential data breaches

Your Privacy Rights

Access and Control

As a Botu user, you have comprehensive rights regarding your personal data:

  • Right to Access: Request a complete copy of all personal information we have about you
  • Right to Rectification: Correct any inaccurate or incomplete personal information
  • Right to Erasure: Request deletion of your personal data (subject to legal obligations)
  • Right to Data Portability: Export your data in a machine-readable format
  • Right to Restrict Processing: Limit how we use your personal information
  • Right to Object: Opt out of certain data processing activities, especially marketing communications
  • Right to Withdraw Consent: Revoke previously given consent for data processing

How to Exercise Your Rights

You can exercise these rights by:

  • Logging into your Botu account settings
  • Contacting our support team through the channels listed below
  • Submitting a formal request through our privacy portal
  • We will respond to all requests within 30 days and provide regular updates on complex requests

Data Sharing and Third Parties

When We Share Information

We maintain strict policies about data sharing and only share your information in these specific circumstances:

Service Providers: We work with trusted partners who help us deliver our services:

  • Cloud hosting providers (Microsoft Azure)
  • Payment processing companies
  • Customer support platforms
  • Analytics and monitoring services
  • Email delivery services
  • Messaging Platform APIs: We integrate with third-party messaging services (Facebook Messenger, WhatsApp Business API, Telegram Bot API, Instagram Graph API) to enable chatbot functionality. Data shared is limited to what's necessary for message delivery and user interaction.

Third-Party Platform Policies: When using messenger integrations, you're also subject to the privacy policies of those platforms:

Legal Requirements: We may disclose information when required by law:

  • Court orders, subpoenas, or other legal processes
  • Government investigations or regulatory inquiries
  • Protection of our legal rights and property
  • Prevention of fraud or illegal activities

Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the business transaction (you will be notified in advance)

What We Don't Do

  • We never sell your personal information to advertisers or data brokers
  • We never rent customer lists to third parties
  • We never share sensitive business data without explicit consent
  • We never use your data to train general AI models or systems

Cookies and Tracking Technologies

Types of Cookies We Use

  • Essential Cookies: Required for basic platform functionality and security
  • Analytics Cookies: Help us understand how users interact with our platform
  • Preference Cookies: Remember your settings and customizations
  • Marketing Cookies: Enable personalized content and advertising (with your consent)

You can control cookies through:

  • Your browser settings (instructions available for all major browsers)
  • Our cookie preference center on the website
  • Account settings within the Botu platform
  • Opting out of analytics tracking through third-party tools

Regional Privacy Laws

European Users (GDPR)

If you are located in the European Union, European Economic Area, or United Kingdom, you have additional rights under the General Data Protection Regulation (GDPR):

  • Enhanced right to information about data processing
  • Right to lodge complaints with your local data protection authority
  • Specific protections for automated decision-making
  • Right to data portability in structured, commonly used formats

Georgian Users

As a company based in Tbilisi, we comply with Georgian data protection laws and regulations, including the Law of Georgia on Personal Data Protection.

Contact Us and Support

If you have questions about this privacy statement, want to exercise your privacy rights, or need assistance with our services:

Primary Support Channels

Support Portal: Botu Support Center

  • 24/7 access to our knowledge base
  • Submit support tickets and track their progress
  • Access to live chat during business hours

Email Support: support@botu.bot

  • General inquiries and technical support
  • Privacy-related questions and requests
  • Business partnership inquiries

Business Information

Company: Botu Location: Tbilisi, Georgia Business Hours: Monday - Friday, 9:00 AM - 6:00 PM (GMT+4)

Privacy-Specific Requests

For data protection matters, you can also reach our privacy team directly:

  • Email: privacy@botu.bot
  • Subject line should include "Privacy Request" for faster processing
  • Include your account email and specific nature of your request

Updates and Changes

How We Handle Updates

We may update this privacy statement periodically to reflect:

  • Changes in our data practices
  • New features or services
  • Legal or regulatory requirements
  • Industry best practices and security improvements

Notification Process

When we make significant changes:

  • Email notifications will be sent to all registered users
  • In-app notifications will appear when you next log in
  • Website banner will highlight the changes for 30 days
  • Version history will be maintained for transparency

Your Options After Changes

If you disagree with any updates:

  • You can delete your account and data at any time
  • You can contact us to discuss specific concerns
  • You can export your data before making any decisions

Document Information:

  • Last Updated: August 12, 2025
  • Version: 2.0
  • Next Review: February 2026
  • Document Owner: Botu Privacy Team

This privacy statement is available in English and Georgian. If there are any discrepancies between versions, the English version will prevail.