Last updated September 3, 2026

Privacy Policy

Bee Bots answers the visitors on a service provider's website and delivers those conversations back to them, translated. That involves two groups of people: the provider, who holds an account, and the visitor to their website, who talks to the assistant. This policy explains what we collect from each, why, and who we share it with.

1. Who handles the data

The Bee Bots service operates under the Bee Bots name, at mybeebots.com. For any privacy matter, write to [email protected].

For visitor data, Bee Bots acts as a processor: the provider who owns the website decides the purpose. For the provider's own account data, Bee Bots is the controller.

2. What we collect from the provider

Data	Purpose
Name and email	Identify the account and allow sign-in
Password	Stored only as a hash — we cannot read your password
Preferred language	Decide which language to translate conversations into
Website domain	Authorize the assistant on that site and no other
Push token	Deliver the new-lead alert to your phone. It is a device identifier issued by the push service — we read nothing else from the device with it
Usage records	Measure plan consumption and calculate billing

3. What the assistant collects from visitors

When someone chats with the assistant on the provider's website, we store:

The conversation messages, in the original language and in translation.
Whatever the visitor volunteers when asking for an estimate: name, phone, email, type of service, ZIP code and desired timing.
An anonymous identifier stored in the browser, so a returning visitor continues the same conversation instead of starting over.
The IP address, used solely to prevent abuse of the widget (someone opening thousands of fake conversations). We do not use IP to profile anyone.

This data belongs to the provider and is isolated per account: no provider can see another's conversations or leads. That isolation is enforced in the database, not just in the interface.

4. What the app stores on your device

The Bee Bots app stores in the operating system's secure storage (Keychain on iOS, Keystore on Android) only: your sign-in session, your chosen language, and a flag that you finished account setup. None of it leaves the device, and all of it is erased when you sign out.

The app does not access contacts, location, camera, microphone, photos, or the content of other apps. There is no advertising tracking and we do not use the device advertising identifier.

5. Who we share it with

Only with those required for the service to work, and only the minimum:

Who	What they receive	Why
Anthropic	Message text	Generate the assistant's reply and the translation
Expo	The push token and the alert text	Deliver the notification to your phone
Stripe	Payment data	Subscription billing. It happens on the website, not in the app — we never receive or store your card number
DigitalOcean	Server and database hosting	Run the service

We do not sell data, and we share nothing with data brokers, ad networks, or any third party for marketing purposes.

Our servers are in the United States. By using the service from another country, you agree to that transfer.

6. How long we keep it

Conversations and leads: for as long as the provider's account is active, because they are that provider's commercial history.
Closed account: we delete the data within 90 days, except what the law requires us to retain (payment tax records, for instance).
Audit and security logs: up to 12 months.

7. Your rights

You may request access, correction, a copy, or deletion of your data, and may withdraw consent at any time. Write to [email protected] and we answer within 30 days.

If you are a visitor to a site served by Bee Bots and want your conversation deleted, you can speak directly to the provider who owns the site, or write to us — we forward the request to them.

To delete your account from the app: Ajustes → Sair ends the session; to erase the account and all its content, write to the address above.

8. Children

Bee Bots is a work tool, intended for people over 18. We do not knowingly collect data from children. If we learn that we have, we delete it.

9. Security

All traffic is encrypted in transit (HTTPS/TLS). Passwords are stored as hashes. Access to each account's data is isolated in the database itself. The session on your phone lives in the operating system's secure storage.

10. Changes to this policy

If we change anything material, we update the date at the top of this page and notify providers by email before the change takes effect.