Privacy Policy

01Information we collect

• Account data — your email and name when you sign up, and the workspace you connect.
• Content you give the assistant — messages in channels the bot is invited to (only those), documents you upload to Present, and prompts you send. We process this to generate briefings, answers and presentations.
• Messaging identities — your WhatsApp/Telegram/Slack ID when you connect a chat, used to route replies and remember context.
• Connected social accounts — when you connect a Facebook Page, Instagram, X, LinkedIn or TikTok account: its name, ID and access tokens (stored encrypted), and the results the platform reports for posts you publish through Botsman (such as reach, views, likes, comments and shares).
• Usage & technical data — basic logs (timestamps, errors, IP) to operate and secure the service.
• Payment data — handled by our payment processor; we never store full card numbers.

02How we use it

• To provide and improve the service (briefings, answers, presentations, memory of how you work).
• To process subscriptions and payments.
• To communicate about your account (sign-in codes, receipts, important notices).
• To keep the service secure and prevent abuse.

03Sub-processors we share data with

We use trusted providers strictly to deliver the service: Anthropic (AI responses; and, when you ask Botsman to analyse a file or make one, the file and the work on it, run in Anthropic's sandbox and deleted from its file storage once the answer is back), xAI (Browse's live news on a subject you ask about: your question and the conversation's words, never your Google data or your Learning Center), OpenAI (voice transcription), ElevenLabs and HUMAIN (speech), Resend (transactional email), Firecrawl (reading public web pages when Botsman researches for you: it receives only the public web addresses to read, nothing about you), Moyasar (payments), Microsoft (Teams messaging, if you connect it), Railway (hosting), and — only if you connect them — Google (Calendar, Drive & Gmail) and Meta (Facebook & Instagram), X, LinkedIn and TikTok, to publish the posts you approve and read their results back. If you connect GitHub, Botsman reads — read-only, and only in the repositories you choose — the documentation, project files and folder names that describe your product (never secrets, keys or credentials), to learn about it. We do not sell your data.

04Google user data

If you choose to connect your Google account, Botsman requests only the access it needs to do what you ask, and you can disconnect at any time from your setup page — which deletes the stored tokens immediately.

• Google Calendar (.../auth/calendar) — to read your upcoming events when you ask what's on, and to create events and Google Meet links when you ask for one.
• Google Drive (.../auth/drive.file) — to create documents you ask us to write, and to read or update only those files. This scope cannot see the rest of your Drive, and we deliberately do not request broader Drive access.
• Gmail (.../auth/gmail.send) — only if you turn Gmail on (a separate switch in Connections; connecting Calendar never asks for it): to send a message you have explicitly approved. Botsman cannot read your mail or your drafts. Sending always requires your confirmation first. Turning Gmail off removes Botsman's Google access at Google.
• Basic profile (openid, email) — to identify your account and link it to your Botsman profile.

We access this data only while carrying out something you asked for. We do not use it for advertising, we do not sell it, we do not use it to train generalised AI models, and no human at Botsman reads it except where you specifically ask for support, where the law requires it, or to investigate abuse or a security incident.

AI processing of Google data. To answer you, Botsman sends only the Google data needed for your request — for example the events you asked about, or a document Botsman created for you — to Anthropic's Claude API, which writes the reply. Anthropic processes it under its commercial terms, which do not allow it to be used to train AI models. Google user data is never sent to any other AI provider: not to our speech providers (ElevenLabs, HUMAIN) or our transcription provider (OpenAI), and it never shapes the talks Present speaks or the posts Create writes. Once a day Botsman reads your calendar and the documents it made with you into a short summary that keeps the chat aware of your week; it is replaced each day, is never kept as lasting facts, and is deleted when you disconnect Google.

05Data retention & deletion

We keep data while your account is active. You can tell any assistant to "forget …" to erase remembered facts, disconnect a channel at any time, or email us to delete your account and associated data. Disconnecting Google removes our stored access and refresh tokens straight away; you can also revoke access yourself at myaccount.google.com/permissions. Deleting your account removes your data within 30 days, except where we must keep records (for example, payment records) to meet legal obligations.

Deleting what a connected platform gave us. Open Create → Channels and press Disconnect on any Facebook Page, Instagram, X, LinkedIn or TikTok account: its access tokens and connection are deleted immediately. For Facebook and Instagram you can also remove Botsman from your Facebook settings; Meta then tells us to delete that account's data, and we do, automatically. Posts already published stay on your own accounts, where you can delete them yourself.

06Cookies

We use a single essential, signed session cookie to keep you signed in. If we use privacy-friendly analytics, it is cookie-free and does not track you across sites.

07Security

Traffic is encrypted in transit (HTTPS), requests from messaging platforms are signature-verified, and access is least-privilege. No system is perfectly secure, but we work to protect your data.

08Your rights

You may request access to, correction of, or deletion of your personal data by emailing support@botsman.io.

09Who is responsible for your data

Botsman is operated by Aldaf Almarin Company For Information Technology, a limited liability company registered in the Kingdom of Saudi Arabia (Commercial Registration No. 7042141361). It is responsible for the personal data described in this policy. Contact: support@botsman.io.

10Changes

We may update this policy; material changes will be reflected by the date above. Continued use means you accept the updated policy.