Privacy Policy
This Privacy Policy explains how BOTFAY collects, uses, stores, and protects your personal data when you use our web application and mobile app. By using BOTFAY, you agree to the terms described below.
1. Who We Are
BOTFAY is an AI-powered business messaging platform that helps companies manage and automate communications via WhatsApp, Telegram, and other messengers. We are based in Ukraine and serve businesses in Ukraine and Europe.
2. What Data We Collect
- Account data: email address, name, company name, role — provided during registration
- Messenger credentials: API tokens, bot tokens, and session identifiers for connected accounts
- Message data: incoming and outgoing messages processed through your connected channels
- Usage data: feature usage, session timestamps, error logs
- Device data: IP address, browser/device type, operating system
We do not collect or store payment card numbers. Payments are processed by third-party providers.
3. How We Use Your Data
- To provide, maintain, and improve the BOTFAY platform
- To authenticate you and keep your account secure
- To process messages through your connected messenger accounts
- To train AI agents on your Knowledge Base content (only your own data)
- To send service notifications (no marketing without consent)
- To comply with legal obligations
4. Data Storage & Infrastructure
Your data is stored using Supabase (PostgreSQL) and deployed on Vercel. We use infrastructure in the EU and US. We do not use Russian-based servers or services.
Each connected messenger channel is stored in its own isolated database table. Message data from different channels is never mixed.
5. Data Sharing
We do not sell, rent, or trade your personal data. We may share data only with:
- Infrastructure providers: Supabase, Vercel (under data processing agreements)
- AI providers: for generating reply suggestions (data is minimized and not stored)
- Legal authorities: only if required by applicable law
6. Data Retention
We retain your account data for as long as your account is active. Message data is retained according to your plan settings. You may request deletion at any time.
7. Cookies & Tracking
We use only essential cookies required for authentication and session management. We do not use advertising or analytics tracking cookies.
8. Your Rights (GDPR)
- Access: request a copy of your personal data
- Correction: request correction of inaccurate data
- Deletion: request deletion of your account and all associated data
- Portability: receive your data in a machine-readable format
- Objection: object to certain types of data processing
9. Children's Privacy
BOTFAY is a B2B platform for businesses and professionals. We do not knowingly collect data from individuals under 18.
10. Changes to This Policy
We may update this Privacy Policy periodically. We will notify you of significant changes by email or in-app notification.