Is botBrains a controller or processor?
For the personal data in your conversations, botBrains acts as the processor and you remain the controller. For the account and billing data of your team, botBrains acts as the controller; see our Privacy Policy.Do you offer a Data Processing Agreement?
Yes. Our Data Processing Agreement governs how botBrains processes personal data on your behalf, including the rules for engaging subprocessors. To request a copy, email legal@botbrains.io.Where do you store and process personal data?
botBrains stores Customer Data in the EU and runs AI inference within the EU. Account and billing data, and other personal data for which botBrains is the controller, follow the GDPR. Service providers outside the EU may process this data under a valid transfer mechanism. See Subprocessors for the full list of services and data locations.Do you transfer personal data outside the EU?
Your conversation data (Customer Data) never leaves the EU: no third-country transfer takes place, from our systems or from those of our subprocessors. For account and billing data, and other personal data where botBrains is the controller, we may use service providers outside the EU under a valid transfer mechanism, such as an adequacy decision, the EU-US Data Privacy Framework, or standard contractual clauses.Data Subject Access Request (DSAR)
Under applicable data protection laws, you may have the right to request access to the personal data botBrains holds about you. You may also update and correct inaccuracies, restrict or object to processing, have the data anonymized or deleted, or exercise your right to data portability. Which rights apply, and who fulfills them, depends on the data:- Conversation data. botBrains acts as the processor, so end users should direct their request to the customer (the controller) whose product they interacted with. We assist that controller in responding, and you can search, export, and delete this data directly in the platform.
- Account and website data. Where botBrains is the controller, you can exercise these rights directly with us.