Privacy Policy

1. Introduction

BotPiper ("we," "us," or "our") operates the BotPiper platform, including ui-site.botpiper.com, ui-account.botpiper.com, and all associated workspace services. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services.

By using BotPiper, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use our services.

2. Information We Collect

Account Information: When you create an account, we collect your name, email address, and password. If you subscribe to a paid plan, we collect billing information including your payment method details (processed securely by our payment providers).

Workspace Data: This includes AI agent configurations, conversations, uploaded files, task board content, memory data, integrations, and any other content you create within your workspace. Your workspace data is stored in your hardware-isolated environment.

Usage Data: We automatically collect information about how you interact with our platform, including pages visited, features used, AI token credit consumption, login timestamps, IP addresses, browser type, and device information.

Communication Data: When you contact us via email or our contact form, we collect the content of your messages along with your name and email address.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the BotPiper platform and your workspace
• Process payments, manage subscriptions, and handle AI token credit billing
• Send transactional emails (account verification, password resets, billing receipts, workspace notifications)
• Monitor platform health, detect abuse, and enforce our Terms of Service
• Improve our services, fix bugs, and develop new features
• Respond to your support requests and communications
• Comply with legal obligations

4. Your Workspace Data

Isolation: Each workspace runs in a hardware-isolated environment. Your workspace data — including conversations, files, agent configurations, and memory — is completely separated from other customers' data.

No Training: We do not use your workspace data to train AI models. Your content remains yours.

AI Model Providers: When your agents interact with AI models (from providers such as Anthropic, OpenAI, Google, DeepSeek, MiniMax, and xAI), your prompts and conversations are sent to these providers to generate responses. These providers have their own data handling policies, and we select providers that do not use API inputs for model training.

Encryption: Workspace data is encrypted at rest and in transit using industry-standard encryption protocols.

5. Third-Party Services

We use trusted third-party services to operate BotPiper:

• Payment Processors: Stripe and Razorpay process your payments. We do not store your full credit card number on our servers.
• AI Model Providers: Anthropic, OpenAI, Google, DeepSeek, MiniMax, and xAI (Grok) provide the AI models your agents use.
• Infrastructure Providers: We use cloud hosting providers to run your workspaces in the United States, Europe, India, and Singapore.
• Messaging Channels: If you connect channels like Telegram, Slack, WhatsApp, Discord, Signal, or SMS, your messages pass through those platforms' infrastructure according to their respective privacy policies.
• Integrations: If you connect third-party integrations (Gmail, GitHub, Notion, etc.), data flows between your workspace and those services according to your configuration.

6. Cookies & Tracking

We use essential cookies to maintain your login session and remember your preferences (such as sidebar state and selected workspace). We do not use third-party advertising trackers.

We may use analytics tools to understand how users interact with our platform in aggregate. This data is anonymized and used solely to improve the service.

7. Data Retention

We retain your account information and workspace data for as long as your account is active. If you cancel your subscription, your workspace data is retained for 30 days to allow for reactivation, after which it is permanently deleted.

If you delete your account, all associated data — including workspace content, billing records, and personal information — is permanently removed within 30 days, except where retention is required by law (e.g., financial records may be retained for up to 7 years for tax compliance).

Usage logs and analytics data are retained for up to 12 months in anonymized form.

8. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data and workspace content
• Export: Request a machine-readable export of your workspace data
• Objection: Object to processing of your data for specific purposes
• Restriction: Request restriction of processing under certain circumstances

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

9. Data Security

We implement industry-standard security measures to protect your data, including:

• Hardware-isolated workspace environments per customer
• TLS 1.2+ encryption for all data in transit
• AES-256 encryption for data at rest
• Regular security audits and vulnerability assessments
• Role-based access controls for our internal team
• Automatic security patches and updates

While we take every reasonable precaution, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

10. International Data Transfers

BotPiper operates infrastructure in the United States, Europe, India, and Singapore. Your data may be processed in any of these regions depending on your workspace location. We ensure that all data transfers comply with applicable data protection laws and that appropriate safeguards are in place.

11. Children's Privacy

BotPiper is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children. If we become aware that a user is under 18, we will promptly delete their account and associated data.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or by posting a prominent notice on our platform at least 14 days before the changes take effect. Your continued use of BotPiper after the changes become effective constitutes acceptance of the updated policy.