Privacy Policy

Last updated: October 21, 2026

This Privacy Policy explains how BotConnector, operated by PT Bico Inovasi Digital, a company based in Indonesia, handles information when you use botconnector.id, the Web App, BCCLI, Developer API, Local AI, and BotConnector Cloud.

1. Information we process

Depending on the feature you use, we may process:

• account information such as email address, display name, authentication records, and account settings;
• prompts, chat messages, files, images, audio, code, or other content you submit;
• AI outputs and conversation state where needed to provide saved-chat features;
• API usage, model selection, token/character/media usage, request identifiers, timestamps, and billing ledger records;
• technical information such as IP address, browser or client type, security logs, error records, and service telemetry;
• support requests and communications;
• transaction metadata such as payment status, amount, currency, processor transaction ID, refunds, and tax/invoice references.

We do not need to receive your full payment-card number when a supported external payment processor handles checkout.

2. How we use information

We process information to:

• create and secure accounts;
• provide requested AI inference and application features;
• route cloud requests to supported AI providers;
• deliver Local AI and device-connected functionality;
• meter Free Starter and PAYG usage;
• prevent abuse, fraud, credential misuse, and security incidents;
• troubleshoot and improve reliability;
• provide support;
• maintain billing, tax, dispute, and compliance records where required.

3. Local AI

When you explicitly use a supported Local AI mode, inference is designed to run through the local runtime on your device rather than BotConnector Cloud.

Some surrounding functions may still require network access, such as account authentication, model discovery or download, update checks, or cloud-only features. Before inference, check the runtime interface to confirm whether the target is local or cloud.

4. BotConnector Cloud and AI providers

When you use BotConnector Cloud, the content needed to fulfill the request may be transmitted to BotConnector infrastructure and to the supported model vendor or inference provider used for that request.

We aim to send only the information required to perform the requested operation. Provider selection may vary by model availability, reliability, supported capability, and routing policy.

Do not submit highly sensitive information unless you are satisfied that the selected execution mode is appropriate for that data.

5. Files and generated content

Files uploaded for chat, document analysis, code processing, or multimedia workflows may be stored or cached for the time reasonably required to complete the feature, maintain conversation functionality, prevent abuse, or satisfy account settings.

Where a feature is described as temporary, we aim to remove temporary processing artifacts according to that feature's lifecycle. Saved content may remain until deleted, expired, or otherwise removed according to product behavior and legal requirements.

6. Payments

When paid checkout is available through DOKU, DOKU processes payment information under its own privacy practices. BotConnector receives transaction information needed to activate service usage, reconcile payments, provide support, and maintain internal billing records.

BotConnector does not use payment processing to create a transferable financial wallet. PAYG balances represent service usage entitlements for BotConnector AI.

7. Cookies and session data

We may use essential cookies or similar storage for authentication, security, language preferences, and service operation. Optional analytics, where enabled, should be subject to applicable consent requirements.

8. Legal bases and legitimate purposes

Depending on your location, processing may be based on performance of our contract with you, legitimate interests in operating and securing the service, compliance with legal obligations, or consent where consent is required.

9. Sharing

We may share information only as reasonably necessary with:

• AI model vendors and inference providers used to fulfill your cloud request;
• hosting, database, security, email, observability, and infrastructure providers;
• payment processors or Merchant of Record providers for paid transactions;
• professional advisers or authorities where required by law;
• a successor entity in a legitimate business transfer, subject to applicable safeguards.

We do not sell personal data to advertisers.

10. International processing

Cloud and payment providers may process information in countries other than your own. Where required, we rely on the safeguards or contractual mechanisms applicable to the relevant provider and jurisdiction.

11. Retention

We retain information only for as long as reasonably needed for the purpose for which it was collected, account functionality, security, billing reconciliation, dispute handling, tax/accounting obligations, or legal compliance.

Retention is determined by the data category and its purpose: account and saved-conversation data are kept while needed to provide account features or until a supported deletion request is processed; temporary uploads and processing artifacts follow the relevant feature lifecycle; authentication, security and diagnostic records are retained only as necessary to investigate incidents and prevent abuse; transaction, tax, refund and dispute records are kept to satisfy applicable obligations. Exact periods vary by record type and legal requirements; please contact support for the applicable period and deletion status. We do not represent account deactivation as account deletion.

When you request account deletion through BotConnector Account Deletion, clearly state that you want your BotConnector account and associated personal data deleted. We may need to verify account ownership, and will explain any records that must be retained and why. Account deletion is not complete until the related data is removed, subject to legitimate retention obligations.

BotConnector native apps (iOS, iPadOS, and Android)

The BotConnector native applications for iOS, iPadOS, and Android give you control over permissions and data:

• Device permissions: Permissions are requested only when the corresponding feature is actively used: camera (taking photos to attach), photo library (selecting photos or images to attach), microphone (voice input), and local network (connecting to AI servers on your own local network, such as Ollama or LM Studio).
• Use without an account (guest mode): The app can be used without signing in (guest mode). In guest mode, chats and local models stay entirely on your device. Without an account, no data is sent to BotConnector.
• Conversation and image storage: Conversation history is stored locally on your device (in a local database). Account-based chat synchronization is optional and text-only. Generated images are saved locally on your device.
• Bring Your Own Key (BYOK): API keys provided by the user (BYOK for AI providers or web search) are stored securely in the device Keychain (iOS/iPadOS) or Keystore (Android). They are transmitted only to the user-selected provider, never to BotConnector.
• Local models and Hugging Face: Local models are downloaded from Hugging Face with user consent and run on-device. Optional Hugging Face tokens are stored locally on your device.
• BotConnector account: When signed in with a BotConnector account, details such as email, display name, plan, and balance are retrieved from the server. Messages and files sent to cloud models are processed by AI providers as described in the processing sections above.
• Account deletion: You can delete your account directly within the app under Settings > Delete account (or via the BotConnector Account Deletion page), following the written steps; this deletes the account and associated personal data in accordance with the Retention section above.
• Legal and support links: Direct links to this Privacy Policy, Terms of Service, and Support are available within the app.

12. Security

We use technical and organizational safeguards appropriate to the service, including HTTPS transport, access controls, secret separation, request validation, service monitoring, and account isolation controls. See Security for more information.

No internet service can guarantee absolute security.

13. Your choices and rights

Depending on applicable law, you may have rights to request access, correction, deletion, restriction, objection, or portability of personal data.

You may also delete or manage supported account content through available product controls. Some records may need to be retained for legal, security, billing, or dispute purposes.

Use BotConnector Support for privacy requests.

14. Children

BotConnector is not intended to be used by children where parental consent or another legal basis would be required and has not been obtained.

15. Changes

We may update this Privacy Policy as the service, providers, or legal requirements change. The current version and update date will remain published here.

16. Contact

For privacy questions or data requests, you can contact us via email at admin@botconnector.id or through BotConnector Support.

PT Bico Inovasi Digital, Jl. Cihampelas No. 201A, RT 001/RW 002, Cipaganti, Coblong, Bandung, West Java 40131, Indonesia.