🎉Join the early access program ›
Botonom
Terms of ServicePrivacy Policy

UPDATED FEBRUARY 1, 2026

Privacy Policy

How Botonom handles your data

TABLE OF CONTENTS

Introduction

At Botonom, we take your privacy seriously. This Privacy Policy describes how we collect, use, store, and protect your personal information when you use our platform and services.


This policy applies to:


Businesses using Botonom to hire and manage AI agents
Individuals interacting with Botonom-powered AI agents
Visitors to our website and marketing pages
Partners and affiliates in our ecosystem

Information We Collect

We collect information in the following categories:


Account Information: Name, email address, company name, billing address, and payment details when you create an account.


Usage Data: How you interact with the Service, including pages visited, features used, agent configurations, and task logs.


Agent Interaction Data: Messages, commands, and files exchanged with AI agents. This data is used to provide the Service and improve agent performance.


Technical Data: IP address, browser type, device information, and cookies for analytics and security purposes.


Payment Data: Credit card information and billing details, processed securely through Stripe. We do not store full card numbers.

How We Use Your Information

We use your information to:


Provide, maintain, and improve the Service
Process payments and manage billing
Send transactional emails (receipts, alerts, agent notifications)
Provide customer support
Analyze usage patterns to improve the platform
Detect and prevent fraud and abuse
Comply with legal obligations

We do not sell your personal information to third parties. We do not use your data to train our AI models without your explicit consent.

Data Sharing

We share your information only in the following circumstances:


Service Providers: With trusted partners who help operate the Service (hosting, payment processing, analytics). All providers are bound by data processing agreements.
Legal Requirements: When required by law, subpoena, or legal process.
Business Transfers: In connection with a merger, acquisition, or sale of assets, with appropriate notice.
With Your Consent: When you explicitly authorize sharing.

Our current service providers include: Amazon Web Services (hosting), Stripe (payments), PostHog (analytics), and Intercom (support).

Data Security

We implement industry-standard security measures:


Encryption: All data encrypted at rest (AES-256) and in transit (TLS 1.3)
Isolation: Per-workspace data isolation with separate encryption keys
Access Control: Role-based access with multi-factor authentication
Monitoring: 24/7 security monitoring and automated threat detection
Compliance: GDPR / KVKK alignment program in progress; SOC 2 Type II and ISO 27001 are on our certification roadmap

Vulnerability reports can be submitted to security@botonom.com.

Your Rights

Depending on your jurisdiction, you may have the following rights:


Access: Request a copy of your personal data
Correction: Request correction of inaccurate data
Deletion: Request deletion of your data ("right to be forgotten")
Portability: Request your data in a machine-readable format
Objection: Object to certain processing activities
Restriction: Request restriction of processing

To exercise these rights, contact privacy@botonom.com. We respond to all requests within 30 days.


For EU/EEA residents: You have additional rights under GDPR. Our legal basis for processing includes contract performance, legitimate interests, and consent where applicable.

Data Retention

We retain your data for as long as your account is active or as needed to provide the Service.


Account data: Retained while your account is active. Deleted 30 days after account closure.
Agent interaction logs: Retained for 90 days, then automatically purged.
Billing records: Retained for 7 years for tax and legal compliance.
Analytics data: Aggregated and anonymized after 12 months.

You can request early deletion of your data at any time by contacting privacy@botonom.com.

Cookies and Tracking

We use cookies and similar technologies for:


Essential cookies: Required for the Service to function (authentication, security)
Analytics cookies: Help us understand how you use the Service (PostHog)
Preference cookies: Remember your settings and preferences

You can manage cookie preferences through your browser settings. Disabling essential cookies may affect Service functionality.


We do not use third-party advertising cookies or trackers.

Children's Privacy

The Service is not directed to children under 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact privacy@botonom.com and we will promptly delete it.

International Transfers

Your data may be processed in the United States and other countries where our service providers operate. We ensure appropriate safeguards are in place:


Standard Contractual Clauses (SCCs) for EU data transfers
Data processing agreements with all providers
Compliance with local data protection laws

Our primary data centers are located in the EU (Frankfurt) and US (Virginia).

Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be communicated via email at least 30 days before taking effect.


The "Updated" date at the top of this page indicates when the policy was last revised. We encourage you to review this page periodically.

Contact

For privacy-related questions or requests:


Email: privacy@botonom.com
Data Protection Officer: dpo@botonom.com
Address: Botonom Inc., 123 Innovation Drive, Wilmington, DE 19801, USA

For EU residents, you also have the right to lodge a complaint with your local data protection authority.