Privacy Policy
Last updated: 21 September 2025
Welcome to DMGBot (“we”, “us”, “our”). We provide AI chatbot software and related services (the “Service”). This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our website and Service.
1) Who we are
Legal Entity: {{LEGAL_COMPANY_NAME}} (“DMGBot”)
Registered Address: {{COMPANY_ADDRESS}}
Contact: support@dmgbot.com
2) Scope
This Policy applies to personal data processed by DMGBot as a controller for our website, dashboard, and marketing, and as a processor on behalf of customers for end-users who chat with bots embedded on customer sites.
3) Data we collect
- Account & Billing: name, email, phone (optional), company, role, billing details, tax IDs (GST/VAT where applicable).
- Product Usage: IP address, device, browser, pages/actions, session logs, performance metrics, timestamps.
- Chat Content: messages and metadata exchanged with the chatbot. Retention is configurable by the customer.
- Integrations: data from tools you connect (e.g., CRM, help desk, messaging) per your configuration and authorization.
- Cookies/Similar Tech: essentials for security and auth; analytics; preferences (see Cookie Policy).
- Support Content: emails, tickets, call/chat transcripts with our support team.
4) Sources of data
- Directly from you when you create an account, configure bots, or contact support.
- Automatically through our product and website via logs and cookies.
- From third-party services and integrations you authorize.
5) How we use data
- Provide, operate, and secure the Service; authenticate users; prevent fraud/abuse.
- Improve features and model quality (including aggregated, de-identified analytics).
- Provide support; send important notices about security, changes, and billing.
- Comply with legal obligations and enforce agreements.
- With consent, send optional marketing communications (you can opt out).
6) Lawful bases
Depending on your region, we rely on one or more of: contract necessity, legitimate interests, consent (where required), and compliance with law. For India, we align with the DPDPA 2023. For EEA/UK, we align with GDPR/UK GDPR.
7) Sharing & disclosures
We do not sell personal data. We share with:
- Sub-processors: hosting, analytics, email/SMS/WhatsApp delivery, payments, monitoring—under data protection agreements.
- Professional advisors (legal, tax, audit) under confidentiality.
- Legal/Compliance: to comply with law, enforce terms, or protect rights/safety.
- Business transfers: in case of merger, acquisition, or asset sale with appropriate safeguards.
8) International transfers
Data may be processed where we or our vendors operate. We use appropriate safeguards (e.g., EU SCCs/UK IDTA, contractual protections for DPDPA) to protect your information.
9) Retention
We keep personal data only as long as necessary for the purposes above, to meet legal obligations, resolve disputes, and enforce agreements. Customers can set chatbot data retention for their workspaces.
10) Your rights
- GDPR/UK: access, rectification, erasure, restriction, portability, and objection; right to withdraw consent.
- India (DPDPA): access, correction, erasure, grievance redressal; withdrawal of consent.
- Other regions: local rights may apply. We will honor valid requests per applicable law.
To exercise rights, email support@dmgbot.com or contact our DPO/Grievance Officer: {{DPO_NAME}} – {{DPO_EMAIL}}. We acknowledge within 7 days and aim to resolve within 30 days (or as required by law).
11) Security
We implement administrative, technical, and organizational measures, including encryption in transit, access controls, logging, and periodic reviews. No method is 100% secure—please protect your credentials and enable MFA where available.
12) Children
The Service is not intended for children under 13 (or the local equivalent). We do not knowingly collect personal data from children.
13) Cookies & tracking
See our Cookie Policy for details on types of cookies, retention, and your choices. You can control cookies via your browser and (where offered) our preference center.
14) Automated decision-making
Our AI outputs may be used to automate responses or triage. We provide controls to configure your bot’s behavior. Human review is available for support and account issues upon request.
15) Processor obligations for customer bots
When customers deploy DMGBot on their sites, customers are the controller for end-user data, and DMGBot acts as processor under applicable DPAs. Customers are responsible for providing end-user notices and obtaining consents where required.
16) Changes to this Policy
We may update this Policy from time to time. We will revise the “Last updated” date above and, for material changes, provide additional notice (e.g., email or in-app).
17) Contact
Email: support@dmgbot.com
Address: {{COMPANY_ADDRESS}}
DPO/Grievance Officer: {{DPO_NAME}} – {{DPO_EMAIL}}