Privacy Policy

We collect the following types of information when you use Xotbot: • Account Information: Name, email address, phone number, company name when you register. • Usage Data: How you interact with the platform, features used, chatbot configurations, and analytics data. • Chatbot Data: Content you upload (documents, website URLs, custom Q&A) to train your AI chatbot. • Conversation Data: Messages exchanged between your chatbot and your end users. • Payment Information: Billing details processed securely through our payment partners (Razorpay/Stripe). • Technical Data: IP address, browser type, device information, and cookies for platform optimization.

Your information is used to: • Provide, maintain, and improve the Xotbot platform and AI services. • Train and optimize your specific chatbot with your uploaded knowledge base. • Process payments and manage your subscription. • Send important service updates, security alerts, and support communications. • Analyze usage patterns to improve features and user experience. • Comply with legal obligations and prevent fraud. We do NOT sell your personal data to third parties.

• All data is encrypted in transit (TLS 1.3) and at rest (AES-256). • We use enterprise-grade cloud infrastructure with SOC2 compliance. • Your chatbot's knowledge base and conversation data are isolated per tenant. • Regular security audits and penetration testing are conducted. • Backups are encrypted and retained for disaster recovery purposes. • Access to production systems is restricted and monitored.

We use the following third-party services: • AI Models: Google Gemini for natural language processing (your data is not used to train Google's models). • Payment Processing: Razorpay/Stripe for secure payment handling. • Cloud Infrastructure: For hosting and data storage. • Analytics: To understand platform usage and improve our services. All third-party providers are selected for their security and privacy compliance.

We use essential cookies for: • Authentication and session management. • Remembering your preferences and settings. • Platform security and fraud prevention. We do not use third-party advertising or tracking cookies.

You have the right to: • Access your personal data stored on our platform. • Update or correct your account information at any time. • Delete your account and all associated data. • Export your chatbot data and conversation logs. • Opt-out of non-essential communications. To exercise any of these rights, contact us at privacy@xotbot.com.

• Active account data is retained as long as your subscription is active. • Conversation logs are retained for 90 days by default (configurable per plan). • Upon account deletion, all data is permanently removed within 30 days. • Anonymized analytics data may be retained for service improvement.

We may update this privacy policy from time to time. We will notify you of any significant changes via email or through the platform. Continued use of Xotbot after changes constitutes acceptance of the updated policy.