GetMyBot — Your AI. Your Rules. Your Bot.

1. Who We Are

GetMyBot is operated by Jeff & Dave, a technology company based in Bali, Indonesia. This policy explains how we collect, use, and protect your data when you use our managed AI assistant platform.

2. What We Collect

Account Information

When you sign up, we collect your email address to create and manage your account. If you sign in via Google, we also receive your name and profile picture. We use this information solely to operate your account.

API Keys

Your AI provider API keys are encrypted using AES-256-GCM before storage. They are only decrypted when needed to facilitate communication between your assistant and your chosen AI provider. We never log, share, or use your API keys for any other purpose.

Conversation Data

Chat messages between you and your assistant are stored to provide conversation history and continuity. This data is stored on our servers and is not shared with third parties.

Workspace Files

Files created by or uploaded to your assistant are stored in your isolated workspace. These files are accessible only to you and your assistant.

Usage Data

We track basic usage metrics (message count, token usage) to display in your billing dashboard. This data is not shared externally.

3. How We Use Your Data

To provide and operate the AI assistant service
To authenticate you and manage your account
To display your conversation history
To show usage statistics in your dashboard
To process payments via Stripe
To send service-related communications

4. What We Do NOT Do

We do not sell your data to third parties
We do not use your conversations to train AI models
We do not access your workspace files except to provide the Service
We do not store your API keys in plaintext
We do not share your API keys with anyone

5. Third-Party Services

When you use your AI assistant, your messages are sent to your chosen AI provider (Anthropic, OpenAI, Google, etc.) using your own API key. These providers have their own privacy policies and data handling practices. We recommend reviewing their policies.

We use Stripe for payment processing. Stripe's privacy policy applies to payment data.

If you choose to sign in with Google, Google's privacy policy applies to the authentication process.

Your data may be transferred to and processed in the United States via Stripe (payments) and your chosen AI provider. By using the Service, you consent to these transfers.

6. Data Security

API keys encrypted with AES-256-GCM at rest
All connections via HTTPS/TLS
Isolated workspace per customer
Database with row-level security
Regular security updates

7. Data Retention

Your data is retained for as long as your account is active. Upon account deletion, all your data (conversations, files, API keys, settings) is permanently removed within 30 days.

8. Your Rights

You have the right to:

Access your data through the portal
Export your conversations and files
Delete your account and all associated data
Update your information at any time

9. Contact

For privacy-related questions or requests, contact us at hello@getmybot.cloud.

Privacy Policy