Privacy Policy

bot0.ai is operated by Bot0 LLC, a Virginia limited liability company. This Privacy Policy describes how we collect, use, and protect your personal data when you use our website and services at bot0.ai.

Account Information: email address, full name, company name, industry sector.

Organizational Data: role definitions, task descriptions, staffing models, workflow designs, and simulation configurations you input.

Usage Data: pages visited, features used, simulation runs, login timestamps, IP addresses.

Technical Data: browser type, device type, operating system, referral source.

Cookies: See the Cookies section below.

• To provide, maintain, and improve the Service
• To run simulations and generate analysis results
• To send transactional emails (verification, password reset, account warnings)
• To enforce usage limits and prevent abuse
• To aggregate anonymized usage statistics for product improvement
• To comply with legal obligations

We do not sell your personal data. We do not use your organizational data to train AI models.

We use the following third-party services to operate bot0.ai:

• Amazon Web Services (AWS) — hosting, database, email delivery (SES), file storage (S3)
• OpenAI / Anthropic — AI model inference for simulation analysis and chatbot features. Your task descriptions and role data may be sent to these providers for processing. They do not retain or train on this data per our data processing agreements.
• Google — OAuth authentication (if you choose to sign in with Google)

bot0.ai uses essential cookies only for authentication (JWT session tokens). We do not use third-party advertising cookies, tracking pixels, or social media widgets.

If we add analytics tools in the future (e.g., Google Analytics), we will update this policy and provide appropriate notice.

• Active accounts: data retained for the duration of your subscription
• Deleted accounts: data retained for 30 days post-deletion, then permanently removed
• Dormant free-tier accounts: deactivated after notice period (see Terms of Service), data retained 30 days
• Login/audit logs: retained for 12 months

We implement industry-standard security measures including: TLS encryption in transit, encrypted database storage, role-based access controls, tenant data isolation, security headers (HSTS, CSP, X-Frame-Options), and audit logging of administrative actions.

You have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your account and associated data
• Export your data (contact us for a data export)
• Opt out of non-essential communications

To exercise these rights, contact us at support@bot0.ai. We will respond within 30 days.

If you are a Virginia resident, you have additional rights under the VCDPA including the right to know, correct, delete, and obtain a copy of your personal data, as well as the right to opt out of the processing of personal data for targeted advertising or sale. Bot0 LLC does not sell personal data or process it for targeted advertising.

The Service is not directed to individuals under 18. We do not knowingly collect personal data from children. If you believe a child has provided us personal data, contact us and we will delete it.

We may update this Privacy Policy from time to time. Material changes will be communicated via email or in-app notification. The effective date at the top of this page indicates the latest revision.

For privacy inquiries:
Bot0 LLC
Email: support@bot0.ai
Website: bot0.ai