BOTBENTO / POLICIES AND HELP

# Privacy notice

Effective and updated 31 October 2026

This notice covers BotBento’s public website, mailing lists, support and app testing. It explains the information involved when you choose conversations, bots, connected tools or calls.

## Who to contact

BotBento is operated by **Djasha Tech FZE**, Business Centre, Sharjah Publishing City Free Zone, Sharjah, United Arab Emirates. The company is registered with Sharjah Publishing City – Free Zone Authority (business licence 4431143.01). Djasha Tech FZE is responsible for the personal information described in this notice; workspace data-processing roles can also depend on an organization’s agreement with us. For privacy questions or requests, email [privacy@botbento.com](mailto:privacy@botbento.com) or use our [contact form](https://botbento.com/contact/). You do not need to sign in to make a request. Please do not send passwords, API keys or identity documents in your initial message.

## Website forms and email subscriptions

Early access collects your email address, consent, signup time and subscription status for product updates and invitations. It is single opt-in: checking the form’s consent box enrolls you and queues a welcome. Joining is free and does not create an app account. The weekly newsletter is a separate subscription requiring email confirmation. Each has an unsubscribe route; withdrawing consent stops future marketing subject to a message already being sent. We may keep a minimal suppression record to respect your choice.

Contact messages contain your optional name, email, message and submission/consent time. Directory suggestions include the proposed name, description, optional link and contact details. We use these to handle the request, not to subscribe you to marketing. Suggestions are not automatically published. Email delivery providers process recipients, messages and delivery events. Newsletter open and click tracking are disabled. Direct email may pass through Cloudflare Email Routing and Hostinger.

## App accounts and conversations

Account features can process your identity and profile details, sign-in/session records, preferences, contact settings, messages, attachments, shared-room membership, bot configuration, routines and activity needed to provide and protect the app. Calls can involve audio, video, participants and connection metadata. Transcription, bot replies and summaries can process audio or text when those features are used. Get required participant consent before enabling them.

Messages and files you share are visible to the participants and bots authorized for that conversation. A bot’s model request may include the selected context, attachments and tool results needed to answer. Bot memory or saved context can persist beyond one reply. Avoid sharing information you do not have permission to disclose. Other participants can retain copies independently of BotBento.

## Connected services, including Google

Connecting an account authorizes the permissions displayed by that provider and the feature’s consent flow. Depending on those permissions and the task, BotBento and its connection service can access account identity, email, calendar, files or other tool data; store connection records and authorization tokens; and read or change provider data to carry out your request. Connecting a service alone is not permission for every bot or conversation to use it.

Tool requests and results can pass through Composio, a runtime you connect, and the configured primary or fallback model services used by a bot. Review the requested access and the selected model before sending sensitive data. You can disconnect a connection in the app and revoke access through the provider, including [Google Account connections](https://myaccount.google.com/connections). Revocation stops future authorized access but does not recall previously sent messages or automatically erase existing copies.

Google account access is for the user-facing features you authorize, not permission to sell your Google data, target advertising with it or train a general-purpose model. Applicable [Google API Services User Data Policy](https://developers.google.com/terms/api-services-user-data-policy) and [Workspace API rules](https://developers.google.com/workspace/workspace-api-user-data-developer-policy), including Limited Use requirements, govern permitted handling. This notice does not claim that a particular scope, integration or downstream provider has completed Google verification or a security assessment.

## Why information is used

We use information to deliver requested features, maintain accounts and connections, synchronize conversations, respond to support, send consented email, prevent abuse and meet legal obligations. Where the GDPR applies, the relevant bases include steps requested before a contract and performance of the service, consent for optional marketing/analytics, legitimate interests in security and support, and legal obligations. For UAE personal-data processing, we rely on consent or an applicable statutory exception; the GDPR bases listed here are not a claim that UAE law recognizes the same bases. You can ask about a particular use, withdraw consent and object where applicable; withdrawing consent does not undo earlier lawful processing.

## Technical information and browser choices

Hosting, security and app infrastructure can process IP addresses, request URLs, browser/device details, timestamps and security events. Diagnostic reporting can send scrubbed error, app-version and native performance information to Sentry when configured. Optional public-website Umami analytics loads only after you allow it. We do not intentionally put signup emails or form contents in analytics events. Your choice and appearance preference are saved in local storage. Change the website analytics choice in the footer; see [Cookies and analytics](https://legal.botbento.com/cookies/).

## Who receives information

Information is shared with participants you choose and service providers needed for the features you use. See [Service providers](https://legal.botbento.com/service-providers/) for the feature-based list, including identity, hosting, models, connections, calls, notifications and diagnostics. Providers and runtimes you choose may have their own terms and retention. We do not sell the early-access list or authorize connected Google data to be sold or used for advertising. Information may also be disclosed where necessary to comply with law, protect safety or address misuse.

## Retention, deletion and transfers

We keep account and conversation information as needed for the service and your settings; subscription information while needed for the list; and correspondence, security, suppression and request-completion records as necessary for their purpose or applicable law. A hashed phone-number hold can remain for seven days after account deletion to prevent number-reuse abuse. Copies may remain temporarily in backups. We do not promise one deletion deadline for every provider, shared conversation or backup. For a specific retention question, contact us.

Use the account export and deletion controls where available, or follow the [account and data deletion instructions](https://legal.botbento.com/delete-account/). Deleting the app alone does not delete your account. Shared participants’ copies and information in third-party accounts or runtimes can require separate removal. Processing can occur outside your country. Transfer safeguards depend on the actual provider and contractual arrangement; contact us for account-specific information before sending data subject to special restrictions.

## Your rights

Depending on applicable law, you can request access, correction, deletion, restriction, portability, withdrawal of consent or objection, and complain to your local data-protection authority. We may need a proportionate identity check before releasing information or changing an account. Use the address associated with the account when possible, and tell us if you cannot access it. We will respond within applicable legal time limits and explain any lawful exception.

## Children and changes

The app is intended for adults aged 18 and over, not children. If a child has provided personal information, contact us so we can investigate and take appropriate action. We update this notice when practices change and communicate material changes through an appropriate notice. The date above identifies this version.

Questions about this page? [Contact the team](https://botbento.com/contact/).

Canonical: https://legal.botbento.com/privacy/
Language: en