Privacy Policy
What personal data Bozor Bot holds, why, for how long, and how to get it out or have it destroyed.
Who we are
Bozor Bot is an AI shopping assistant for WooCommerce stores, operated by Bozor Bot ("Bozor Bot", "we"). Questions about this policy go to support@bozor-bot.com.
Who is responsible for what
Two kinds of people use Bozor Bot, and our role differs between them:
| Data | Controller | Bozor Bot is |
|---|---|---|
| A merchant's account and billing details | Bozor Bot | Controller |
| A merchant's catalogue and store pages | The merchant | Processor |
| A shopper's chat messages on a merchant's store | The merchant | Processor |
A merchant is a business that signs up and adds our chat widget to its store. A shopper is someone who uses that widget. When we handle a shopper's messages we do so on the merchant's behalf and under their instructions, and the merchant's own privacy policy applies to the shopper.
Data we hold about merchants
- Account: email address, a password stored only as an Argon2id hash, organization name, and the people you invite.
- How you found us: recorded once when you register — any campaign tags in the link you followed, the name of the website that sent you (the site only, never the full address), which button on our site you clicked, and your answer if you choose to tell us how you heard about us. We use it only to see which of our marketing works, and it is deleted with your account.
- Stores: site URLs, allowed origins, widget settings, and the products, pages and policies we index from your store so the assistant can answer from them.
- Billing: your plan, subscription status, and usage counts. Card details are collected by Stripe on Stripe's own pages and never reach our systems.
- Email: if you enable it, notifications when shoppers ask questions your store's content cannot answer. In your first week, up to three short emails about setting up: a reminder if no store is connected, a note when your first shopper starts a conversation (quoting their first question), and a summary of the week. There are none after that.
We use this to provide the service you signed up for, to bill for it, to keep it secure, to contact you about your account, and to understand which of our marketing brings people to it. The legal basis is the performance of our contract with you and, for security, fraud prevention and measuring our marketing, our legitimate interests.
Data we process for shoppers
When a shopper uses the chat widget on a merchant's store we store:
- the text of their messages and the assistant's replies;
- a random visitor id generated in their browser, so a conversation can resume after a page reload;
- the page they were on and their browser language;
- token counts and cost, for billing the merchant.
We do not store IP addresses against conversations, and the widget sets no cookies, uses no advertising identifiers and does no cross-site tracking. The visitor id is not linked to any other data and is never treated as an identity. The widget shows a notice before the first message explaining that messages are sent and stored, and asking shoppers not to share payment details.
If you are a shopper and want your conversations deleted, ask the store you chatted with. They can erase them from their dashboard. We have no relationship with shoppers and cannot verify who they are, so we act on the merchant's instructions rather than on direct requests.
This website
This site (bozor-bot.com) uses Google Analytics to count visits and see which pages are read. Google Analytics sets cookies and receives your IP address and browser details. Fonts are loaded from Google Fonts, which also receives your IP address. You can block both with a standard content blocker; the site works without them.
The merchant dashboard at app.bozor-bot.com keeps you signed in using browser storage. It is not used for tracking.
How long we keep it
| Data | Kept for |
|---|---|
| Conversations and messages | The merchant's choice, between 7 days and 10 years; 365 days by default. Measured from the last message. |
| Indexed products and pages | Until the merchant deletes the content or the store |
| Account and organization | Until the account is deleted |
| Usage records | Kept after erasure; see below |
| Staff audit log | Kept after erasure; see below |
There is no "keep forever" option for conversations. Expired conversations are deleted automatically.
What survives erasure, and why. Usage records are counters attributed to a merchant — no message text, no visitor id, no address — and invoices are calculated from them, so we keep them to meet billing and legal obligations. The audit log records what our staff did to an account; an audit log the subject could erase would not be one. When an account is deleted its audit entries remain with the link to the person removed.
Who else processes data
| Provider | Purpose | What reaches them |
|---|---|---|
| OpenAI | Embeddings and answer generation | Shopper message text and the catalogue and page content retrieved to answer it. Not used to train their models under OpenAI's API terms. |
| Stripe | Payments | Merchant billing details and card data. No shopper data. |
| Render | Hosting and database (EU, Frankfurt) | All stored data, at rest. |
| Resend | Sending email | Merchant email addresses and the content of notification emails. |
| Analytics and fonts on this website | Visitors to bozor-bot.com only. No merchant or shopper data. |
We do not sell personal data, and we do not share it with anyone else except where the law requires it.
Some of these providers process data outside the European Economic Area. Where they do, the transfer relies on the provider's standard contractual clauses or an equivalent safeguard.
How it is protected
- Each store's data and index is separated from every other store's, and that separation is covered by automated tests.
- Connections are encrypted in transit.
- Passwords are hashed; the plugin's credentials are signed rather than sent, and are never stored in readable form.
- Logs are scrubbed on every line: email addresses are replaced with a fingerprint, and passwords, tokens and keys are removed.
If personal data is exposed, we notify affected merchants without undue delay so they can meet their own obligations.
Your rights
Depending on where you live, you may have the right to access, correct, export, restrict or erase your personal data, and to object to how it is used.
- Merchants can download everything we hold about their organization as a file from Dashboard → Privacy → Download my data, delete a store's conversation history, and delete their account, which removes their stores, content and conversations. For anything else, email support@bozor-bot.com.
- Shoppers should contact the store they chatted with, which can erase their conversations from Dashboard → Privacy.
You also have the right to complain to your local data protection authority.
Children
Bozor Bot is a service for businesses and is not directed at children. Merchant accounts are for people aged 18 or over.
Changes to this policy
If we change this policy in a way that matters, we will email merchants before the change takes effect. The date at the top shows when it last changed.