Privacy Policy

1. Scope

BldBot is an agent operations workspace available through app.bldbot.site and the marketing website bldbot.site.

This policy applies to website visitors, authenticated users, owners, editors, operators, and users whose conversations are processed through configured channels.

2. Data We Process

We process only the data required to authenticate users, operate AI agents, manage access, measure usage, and support billing.

• Account data: name, email address, avatar or profile data returned by Google or Yandex OAuth.
• Workspace data: bots, prompts, KB files, external request configuration, departments, roles, and audit records.
• Conversation data: inbound and outbound messages, metadata, channel identifiers, moderation events, and operator actions.
• Billing data: token balances, payment records, and optional Telegram account linkage used for Telegram Stars billing only.
• Technical data: session records, IP address, user agent, security logs, and service diagnostics.

3. How We Use Data

We use data to provide the service, secure access, execute configured agent workflows, maintain operator and audit controls, and process billing events.

• Authenticate and maintain user sessions.
• Route messages across channels and operator queues.
• Execute configured knowledge retrieval and external API actions.
• Measure token usage, support billing, and prevent abuse.
• Investigate incidents, errors, and security events.

4. Sharing and Processors

BldBot does not sell personal data. Data is shared only with processors or platforms required to operate the service.

• OAuth providers such as Google and Yandex for login.
• Messaging and channel platforms that you explicitly connect, such as Telegram, WhatsApp, Facebook, MAX, VK, and website widget traffic.
• Infrastructure and database providers that host the application.
• Payment and billing platforms required to complete Telegram Stars billing.

5. Retention

We keep account, workspace, usage, billing, and audit data while the service is active and for a reasonable period afterwards when needed for security, accounting, dispute resolution, or legal compliance.

Telegram linkage remains optional and can be updated or removed through the product flow.

6. Security

We use access control, session management, audit logs, and role-scoped workspaces to reduce unauthorized access risk.

No system is risk-free, so users remain responsible for protecting their connected channel credentials and workspace access.

7. Your Rights

Depending on your jurisdiction, you may have rights to request access, correction, deletion, or restriction of certain personal data.

Requests should be made using the contact details published on bldbot.site or through the support path available in the product.