Privacy Policy

1. Who we are

BotCraft AI ("BotCraft AI", "we", "us") provides tools that let you build, deploy, and embed AI chatbots. BotCraft AI is the data controller responsible for the personal data described in this notice. You can reach us at botcraftaisupport@gmail.com.

2. Data we collect

• Account data: email, password (hashed), full name.
• Chatbot configuration: bot names, prompts, greetings, colors, and other settings you create.
• Conversation logs: messages exchanged between end-users and your chatbots, used to power AI replies and your analytics.
• Billing data: handled by our payment processor, Paddle. We store only the subscription status and customer ID — not card details.
• Usage metrics: message counts and feature usage tied to your plan limits.

3. How we use your data

• To operate, maintain, and improve BotCraft AI.
• To generate AI responses through model providers (e.g. Anthropic, Lovable AI Gateway).
• To enforce plan limits and process subscription changes.
• To respond to support requests and security incidents.

4. Legal basis for processing

• Performance of a contract: creating and operating your account, delivering chatbot functionality, processing your subscription.
• Legitimate interests: securing the platform, preventing fraud and abuse, improving the service, and basic analytics.
• Legal obligation: keeping billing and tax records, responding to lawful requests.
• Consent: where we ask for it explicitly (e.g. optional communications). You can withdraw consent at any time.

5. Third-party processors

We rely on trusted vendors to run the service: cloud hosting and database (Lovable Cloud / Supabase), payments (Paddle.com, acting as Merchant of Record), and AI model providers. These processors only receive the data they need to perform their role.

6. Your rights

You can access, update, or delete your account data at any time from your Settings page, or by emailing botcraftaisupport@gmail.com. Depending on your jurisdiction you may also have rights to rectification, restriction, portability, objection, and the right to lodge a complaint with a supervisory authority. Deleting your account removes your chatbots, configurations, and conversation logs.

7. Data retention

We keep account and chatbot data for as long as your account is active. After deletion, backups are purged within 30 days. Billing records may be retained longer where required by law.

8. Security

Data is encrypted in transit. Access to production data is restricted to authorized personnel. No system is perfectly secure — please use a unique, strong password.

9. Changes

We may update this policy from time to time. Material changes will be announced in-app or by email.

10. Contact

Questions? Email us at botcraftaisupport@gmail.com.