Privacy Policy

botimi ("we," "us," "our") provides an AI chatbot platform that businesses ("vendors," "you") use to train, deploy, and manage chatbots for their own customers. This policy covers the data we collect from you as a vendor using our dashboard and services. If you're an end customer chatting with a bot built on botimi, that conversation is governed by the privacy practices of the specific business you're talking to, not directly by botimi — we process that data on their behalf, as described below.

Information we collect

• Account information: your name, email, company name, industry, and country when you sign up.
• Payment information: processed directly by Pesepay, our payment processor. We never see or store your full card number or mobile money PIN — we only receive confirmation that a payment succeeded or failed, and a reference number.
• Content you provide to train your bot: website URLs and pages we crawl on your instruction, documents you upload, and any text or Q&A pairs you enter.
• Conversation data: messages exchanged between your chatbot and your customers, on your website widget or WhatsApp Business number, so the bot can function, so you can view your own conversation history, and so we can generate the analytics and support-ticket features you use.
• Usage data: login activity, feature usage, and conversation counts, used for billing (your conversation-credit balance) and to improve the product.

How we use this information

• To operate the service — training your bot, running conversations, generating analytics, and processing escalations to your support inbox.
• To process payments and manage your subscription plan and credit balance.
• To send you transactional emails: a welcome email on signup, ticket and escalation alerts, payment receipts, low-credit and renewal reminders, and password-reset or team-invite links. These are operational, not marketing — we don't currently send promotional email campaigns.
• To respond when you contact support.
• To comply with legal obligations where applicable.

Who we share information with

We don't sell your data. We do share it with the following third parties, only as needed to run the service:

• AI model providers (Groq, Google Gemini, OpenRouter, and OpenCode Zen) — process the content of chatbot conversations to generate responses. Your knowledge-base content and conversation text passes through whichever provider is generating that specific reply.
• Pesepay — processes your payment transactions.
• Meta / WhatsApp Business Platform — if you connect a WhatsApp number, messages sent and received also pass through Meta's infrastructure, governed additionally by Meta's own terms.
• Resend — delivers the transactional emails described above on our behalf.
• Google — if you choose to sign in with your Google account, Google authenticates you and shares your name and email with us.

Data storage and security

Passwords are never stored in plain text — we store a one-way cryptographic hash (bcrypt) that can't be reversed. Traffic to and from the service is encrypted (HTTPS). We have not obtained third-party security certifications (such as SOC 2 or ISO 27001) — if that matters for your own compliance needs, please contact us before relying on us for a use case that requires it.

Data retention and your rights

We retain your account and conversation data for as long as your account is active. If you'd like your data corrected, exported, or deleted, contact us at the email below — this is currently a manual process handled by our team on request, not a fully self-service export/delete tool.

Depending on where you're based, you may have specific rights over your data — for example under Zimbabwe's Cyber and Data Protection Act, or the EU's GDPR if you're an EU-based user. We'll honor reasonable requests to access, correct, or delete your personal information.

Cookies and local storage

We use your browser's local storage to keep you signed in (your session token) and remember interface preferences like light/dark mode and sidebar state. We don't use third-party advertising or tracking cookies.

Children's privacy

botimi is a business tool and is not directed at, or knowingly used by, children.

Changes to this policy

If we make material changes to this policy, we'll update the date at the top of this page. Continuing to use botimi after a change means you accept the updated policy.

Contact us

Questions about this policy, or a data request? Email us at support@botimi.co.zw.