Privacy Policy

Summary of Key Points

• Information Collected: Personal details you voluntarily provide (name, contact details, billing information) and technical information automatically collected (IP address, browser type).
• Sensitive Information: We do not collect sensitive personal information.
• Third-party Information: We do not collect personal information from third-party sources.
• Purpose of Information Processing: To deliver and enhance our Services, ensure security, improve customer support, and comply with legal requirements.
• Data Sharing: We may share data in specific scenarios, including business transactions such as mergers or acquisitions.
• Security Measures: We employ robust technical and organizational safeguards to protect your data.
• Your Rights: Depending on your jurisdiction, you have the right to access, correct, delete, or manage your data.

1. Information We Collect

We collect information you voluntarily provide when registering for or using our Services. This may include:

• Personal Information: Name, email, phone number, billing address, and payment details.
• Automatically Collected Information: Technical data (IP address, browser type) collected through cookies and similar technologies.

2. How We Process Your Information

We use your information to:

• Provide and improve Services
• Manage user accounts and interactions
• Ensure security and prevent fraud
• Comply with legal obligations

3. Legal Basis for Processing

We process your information based on:

• Your consent
• Legal obligations
• Protection of vital interests

4. Information Sharing

We may share your personal information:

• With service providers assisting us in delivering our Services
• During corporate transactions (mergers, acquisitions)

5. Cookies and Tracking Technologies

We use cookies and similar tools to enhance service performance, analytics, and user experience. You can control cookie preferences through your browser settings.

6. Artificial Intelligence Products

Our Services include AI-powered features designed to enhance customer support experiences. We partner with third-party AI providers (e.g., Mistral AI, OpenAI) and may share your input data to deliver these functionalities.

7. Google User Data (Analytics & Search Console)

Botric offers optional integrations that let you connect your own Google account so that Botric can read reporting data about websites you own. These integrations are entirely optional, are initiated by you, and can be disconnected at any time.

7.1 Google API Services User Data Policy

Botric’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

7.2 What We Access, and Why

When you connect a Google integration, Botric requests only the following OAuth scopes:

• openid, email, profile — reads your name, email address, and Google account identifier. Used to identify which Google account owns the connection, to display it in your workspace settings, and to pre-select the correct account if you connect a second Google integration.
• https://www.googleapis.com/auth/analytics.readonly — read-only access to your Google Analytics 4 accounts, properties, and reports. Used to list the GA4 properties you can access so we can match the correct one to your website, and to retrieve aggregated traffic and engagement reports for that single property.
• https://www.googleapis.com/auth/webmasters.readonly — read-only access to Search Console data for your verified sites. Used to list the Search Console properties you can access so we can match the correct one to your website, and to retrieve search performance data for that single property.

Botric requests read-only access. We never create, modify, or delete anything in your Google Analytics or Search Console accounts, and we never request access to your Google Drive, Gmail, Calendar, Contacts, or any other Google service through these integrations.

7.3 What Data We Retrieve and Store

• Google Analytics: for the single property you select, aggregated reporting data — active users, new and returning users, sessions, page views, engagement rate, average session duration, bounce rate, and event counts — broken down by date, default channel grouping, traffic source and medium, page path, country, and event name.
• Search Console: for the single property you select, search performance data — clicks, impressions, click-through rate, and average position — broken down by date, search query, page, country, and device.
• No demographic data: Botric requests no demographic, age, gender, interest, or Google Signals dimensions, and receives no individual-level or personally identifiable visitor data from Google Analytics. All data we receive is pre-aggregated by Google.
• Storage:this data is stored in Botric’s own database so that your dashboard loads without calling Google on every page view and so that we can generate historical and month-over-month reports. Your Google OAuth access and refresh tokens are encrypted at rest using AES-256-GCM and are never transmitted to your browser or to any third party.

7.4 How We Use It

Google user data is used only to provide and improve the analytics, reporting, and AI-visibility features you see inside your own Botric workspace. It is visible only to authenticated members of the workspace that created the connection.

We do not:

• sell, rent, or license Google user data;
• transfer Google user data to third parties, except to the infrastructure subprocessors that host Botric and only as required to operate the service, or where required by law;
• use Google user data for advertising, ad targeting, ad personalization, or to build advertising profiles;
• use Google user data to develop, train, improve, or fine-tune generalized artificial-intelligence or machine-learning models;
• allow humans to read Google user data, except where you have given us explicit permission for a specific support request, where it is necessary for security purposes such as investigating abuse, where it is necessary to comply with applicable law, or where the data has been aggregated and anonymized.

7.5 Retention

Encrypted OAuth tokens are retained only while the integration is connected. Reporting data retrieved for your workspace is retained as part of your workspace’s historical reporting for as long as your workspace exists, so that period-over-period comparisons remain available.

7.6 Revoking Access

You can disconnect a Google integration at any time from Integrations in your Botric workspace. When you disconnect, Botric revokes its OAuth access to your Google account and stops retrieving any further data from it. Where the same Google account also backs another connected Botric integration, we revoke the OAuth grant once the last integration using that account is disconnected.

You can also independently review and revoke Botric’s access to your Google account at any time at https://myaccount.google.com/permissions.

To request deletion of Google user data held by Botric, email privacy@botric.ai and we will action the request within 30 days.

8. Social Logins

Using social media logins may share certain profile information with us, depending on your privacy settings with the third-party provider.

9. Data Retention

We retain your personal information only as long as needed for the purposes outlined, or as required by law. When no longer needed, we securely delete or anonymize it.

10. Data Security

We employ robust security measures, including encryption, to protect your information. While we strive for maximum security, no method is entirely foolproof.

11. Minors' Privacy

Our Services are not intended for children under 18. We do not knowingly collect data from minors.

12. Your Privacy Rights

You have rights to access, correct, or delete your data depending on your jurisdiction. Contact us at privacy@botric.ai to exercise your rights.

13. Do-Not-Track Controls

We currently do not respond to Do-Not-Track browser signals. We will update this policy if standards for handling such signals are established.

14. US Residents' Specific Rights

US residents, depending on their state (e.g., California, Virginia, Colorado), may have additional rights such as:

• Right to know what personal data is collected
• Right to request deletion of personal data
• Right to opt-out of sale of personal data
• Right to non-discrimination for exercising privacy rights

15. Regional Privacy Rights

Depending on your location, additional privacy rights may apply:

• Australia & New Zealand: Rights under the Australian Privacy Act and New Zealand Privacy Act.
• European Union & UK: Rights under GDPR including access, rectification, erasure, and data portability.
• Canada: Rights under PIPEDA including access and correction of personal information.

16. Updates to This Notice

We may update this Privacy Notice from time to time. We will notify you of any changes by posting the new policy on this page. Changes are effective immediately upon posting.

17. Contact Information

If you have any questions about this Privacy Notice, please contact us:

BOTRICAI INC
1007 N Orange St, 4th Floor Suite #5283
Wilmington, Delaware, USA
Email: privacy@botric.ai