Privacy Policy

Last updated July 9, 2026

BotDesk ("we", "us") provides AI chat widgets that businesses embed on their websites. This policy explains what we collect and how it's used — both for our direct customers (businesses with a BotDesk account) and for visitors who chat with a BotDesk-powered widget on a business's site.

What we collect from businesses (our customers)

Account details — your name, email address, and sign-in method (Google, GitHub, or email/password via Google Firebase Authentication). We never see or store your password.
Bot configuration — the settings, knowledge, links, and website content you provide or ask us to scan so your chatbot can answer questions about your business.
Team members — names, email addresses, and optional phone numbers of employees you add, used for sign-in, alerts, and (if configured) SMS notifications.
Billing — payments are processed by Stripe. We store your plan and subscription status, but your card details never touch our servers.

What we process for visitors of our customers' websites

Chat messages — conversations with a business's chatbot are stored so the business can read them, receive transcripts, and follow up. We process this data on behalf of the business you were chatting with; contact that business for requests about your conversation.
Contact details you choose to share — if you submit your name, phone number, or email through a chat (for a callback, booking, or quote), it is delivered to that business.
Chat messages are sent to OpenAI to generate the AI's responses. They are not used by us to train AI models.

Service providers we rely on

Cloudflare — hosting, storage, and content delivery
Stripe — payment processing
OpenAI — generating chatbot responses
Google Firebase — authentication
Google Analytics — website usage statistics on botdesk.studio (loaded only after cookie consent)
Resend — transactional and notification email
Twilio — SMS alerts, only when a business configures its own Twilio account

Retention & deletion

Account and bot data is kept while your subscription is active. Conversations and leads are capped and older entries are rotated out automatically. To delete your account and its data, email hello@botdesk.studio and we'll complete the deletion within 30 days.

Email preferences

Marketing emails include an unsubscribe link and stop immediately when used. Operational email (receipts, alerts you configured, security notices) is sent as part of the service.

Your rights

You can request a copy, correction, or deletion of your personal data at any time by emailing hello@botdesk.studio. If you chatted with a business's widget, direct requests to that business — we'll assist them in fulfilling it.

Changes

We'll update this page when our practices change and revise the date above. Material changes are announced to account holders by email.