Privacy policy
1. Who this covers
Three groups of people meet Bamboo Bot: customers who build bots, end users who chat with a customer's bot (on a website or a chat app), and visitors to these public pages. For end users, the customer who runs the bot decides what it collects and is responsible for telling you; we process those messages on the customer's behalf.
2. What we collect
- Account: your email address and a password hash (sign-in uses a KvK Tracker account).
- Bots: names, settings, rules, logs, and the tokens and API keys you give us for chat apps - stored encrypted and used only to run your bot.
- Messages the bot handles: to answer, a bot reads incoming messages. We keep short per-bot memory the rules need (cooldowns, giveaway entries, polls, sign-ups). Website chats are stored as conversations so the customer can read and answer them, including the name, email and page address a visitor chooses to give.
- Leads: answers people give to a bot's question flow (for example name, contact details, request).
- Payments: invoice records. Card payments are handled by Stripe, and PayPal and Litecoin payments by those networks; we never see full card numbers.
- Technical data: IP addresses in security and rate-limit logs, to stop abuse.
3. Why
To run the bots you build, show you your inbox and leads, take payments, keep the service secure, and answer you when you contact us. We don't sell personal data and don't use end users' messages for anything else.
4. How long
- Website conversations and leads: until the customer deletes the lead or the bot, or asks us to delete them.
- Bot logs: the most recent 400 entries per bot.
- Deleting a bot removes its tokens and keys at once.
- Invoices: as long as tax law requires.
5. Cookies, storage and advertising
The dashboard keeps your sign-in token in your browser's local storage. The website chat bubble keeps a random visitor id in the visitor's browser so a returning visitor sees their conversation; it sets no cookies and shows no ads.
The public pages of bamboobot.shop (this page, the home page, guides, about and terms) may show ads from Google AdSense. Google and its partners use cookies to show ads based on your visits to this and other websites. You can turn off personalised ads in Google's Ad Settings, or opt out of other vendors' cookies at aboutads.info. Visitors in the EEA, the UK and Switzerland are asked for consent first. How Google uses this data. The dashboard, sign-in, checkout and chat bubble never show ads.
6. Who else handles data
Our hosting and network provider (Cloudflare), payment providers (Stripe, PayPal, the Litecoin network), Google for ads on public pages, and the chat apps you connect your bots to - messages pass through those apps under their own privacy policies.
7. Your choices
You can see and change your bots, close conversations, delete leads and bots, and ask us to delete your account or any conversation. End users should contact the business running the bot first; we will help that business answer requests. Email [email protected] for access, correction or deletion requests.
8. Children
Bamboo Bot is not meant for children under 13, and our public pages are not directed at children.
9. Changes
We may update this policy; the date above shows the latest version.