Last updated: December 2025
This Privacy Policy ("Policy") describes how BotBot ("we," "us," or "our") collects, uses, stores, shares, processes, and protects personal data in connection with our website, applications, products, and services (collectively, the "Services"). This Policy applies to all users and visitors of our Services, regardless of location.
We are committed to protecting your personal data and respecting your privacy rights. This Policy is designed to comply with applicable data protection laws, including but not limited to the General Data Protection Regulation (EU) 2016/679 ("GDPR"), the Brazilian General Data Protection Law (Lei Geral de Proteção de Dados, "LGPD"), Law No. 13,709/2018, and the California Consumer Privacy Act ("CCPA") and California Privacy Rights Act ("CPRA"), as well as other applicable U.S. state privacy laws.
By accessing or using our Services, you acknowledge that you have read, understood, and agree to the terms of this Privacy Policy. If you do not agree with our policies and practices, please do not use our Services.
BotBot, located at Av. Brig. Faria Lima, 1461-1485, Pinheiros, São Paulo, Brazil, is the data controller responsible for processing your personal data. For GDPR purposes, we are the data controller when processing your personal data. For LGPD purposes, we act as the "controller" (controlador) of your personal data.
For inquiries related to data protection, you may contact our Data Protection Officer (DPO) at: [email protected].
We may collect, use, store, and transfer different kinds of personal data about you, which we have grouped together as follows:
We do not knowingly collect or process Special Categories of Personal Data (as defined under GDPR) or Sensitive Personal Data (as defined under LGPD and CPRA), which include data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data, data concerning health, sex life, or sexual orientation.
Our website and services utilize the following technologies that may collect your data:
Our website uses cookies and similar tracking technologies to identify your browser or device and to collect, store, and share certain information. Cookies are small text files placed on your device to store data that can be recalled by a web server in the domain that placed the cookie.
We use the following types of cookies and similar technologies:
You can control cookies through our cookie consent management tool, which allows you to accept or decline cookies when you first visit our website. You can also modify your cookie preferences at any time by clicking on the "Cookie Settings" link in the footer of our website. www.aboutcookies.org or www.allaboutcookies.org.
Please note that refusing or disabling cookies may impact your experience and the services we can offer, as certain features of our website may not function properly without cookies.
We process your personal data only when we have a valid legal basis to do so. Depending on the specific processing activity, we rely on the following legal bases:
We may share your personal data with the following categories of recipients:
We do not sell your personal data to third parties.
Your personal data may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your jurisdiction.
When we transfer personal data internationally, we implement appropriate safeguards to ensure your data is protected in accordance with applicable laws, including Standard Contractual Clauses (SCCs) approved by the European Commission and other legally recognized transfer mechanisms.
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements.
When determining the appropriate retention period, we consider the amount, nature, and sensitivity of the data, the potential risk of harm from unauthorized use or disclosure, the purposes for which we process the data, and applicable legal requirements.
Depending on your location and applicable law, you may have the following rights regarding your personal data:
To exercise any of these rights, please contact us at [email protected]. We will respond to your request within the timeframe required by applicable law.
Our Services are not directed to children under the age of 16 (or the applicable age of consent in your jurisdiction). We do not knowingly collect personal data from children. If we become aware that we have collected personal data from a child without appropriate consent, we will take steps to delete that information as soon as possible.
If you are a parent or guardian and believe your child has provided us with personal data, please contact us at [email protected].
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption, access controls, regular security assessments, and employee training.
While we strive to protect your personal data, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security of your data.
We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will notify you by updating the "Last Updated" date at the top of this Policy.
We encourage you to review this Policy periodically to stay informed about how we are protecting your data.
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:
Data Controller: BotBot
Email: [email protected]
Postal Address: Av. Brig. Faria Lima, 1461-1485, Pinheiros, São Paulo, Brazil