Who we are
Botsmith is a product of Atomos Technologies OPC Private Limited ("we", "us"), a company registered in India under CIN U72900WB2022OPC254332. We provide software that lets a business build and run a bot on its own WhatsApp Business account.
What we collect
From the business owner
- Your WhatsApp phone number and display name, so we know who is chatting with the builder.
- Business details you type or upload — name, category, hours, address, menu or price list, services, FAQs.
- Files you send us to build from: photographs, PDFs, and video.
- Billing details if you subscribe to a paid plan. Card and UPI details are handled by our payment processor and never reach our servers.
From your staff
If you add staff to be alerted — a kitchen, a front desk — we hold their WhatsApp number and, if you give one, a name, only to send them the alerts you set up. They have not signed up to Botsmith, so we keep nothing else about them. When you remove someone, their number is deleted straight away and they receive no further alerts.
From your customers
When someone messages a bot you built, we process that conversation on your behalf so the bot can answer. That includes their WhatsApp number, the messages they send, and anything they submit through a form — an order, a booking, an address.
Automatically
- Technical logs: timestamps, message identifiers, error traces and delivery status.
- A session identifier and your theme preference on this website. Nothing else — see the cookie policy.
Why we use it, and on what basis
| What for | Basis |
|---|---|
| Building and running your bot | Performance of our contract with you |
| Delivering messages through WhatsApp | Performance of our contract with you |
| Billing and receipts | Performance of our contract, and legal obligation |
| Security, abuse prevention and debugging | Our legitimate interest in a working, un-abused service |
| Improving prompts and accuracy | Our legitimate interest, using aggregate data only |
| Marketing to your customers | Their explicit opt-in, captured and revocable at any time |
We do not sell personal data. We do not use your business data or your customers’ messages to train third-party AI models.
How long we keep it
| Data | Kept for | Why |
|---|---|---|
| Message content | 180 days, on every plan | Support, dispute resolution and debugging. Deliberately the same whatever you pay — how long we hold your customers’ conversations is a privacy commitment, not a feature we sell |
| Uploaded media | 1 year on Starter, 2 years on Growth, 3 years on Business | So your bot can keep serving the images you gave it |
| Orders and bookings | 8 years while your account is active; deleted 365 days after a lapsed account pauses | Business records you rely on — but they name your customers, so they are personal data and do not outlive the account |
| Invoices and payment records | 8 years, including after the account and everything else is deleted | Statutory retention under Indian company and GST law. These are financial records we are obliged to keep — they are not personal data we kept anyway |
| Staff numbers you add for alerts | Until you remove the person — deleted straight away, not archived — or 365 days after a lapsed account pauses | Only to send the alerts you set up. They never signed up to Botsmith, so nothing is kept once they are removed |
| Business events and analytics | 400 days | Year-on-year reporting |
| Audit log | 7 years | Security and legal obligation |
| Everything else | Until you delete it or close the account |
If you stop paying, a separate schedule applies. Your bot pauses and nothing is deleted; 90 days later we delete uploaded media and revoke our access to your WhatsApp Business Account; 365 days later we delete the rest of your personal data — your bot, contacts, staff numbers, conversation history, orders and bookings. We warn you before each deletion with a link to download your data. Only invoices and payment records are kept after that, because company and GST law require it. This means a business that lapses for more than a year and then returns will find its order and booking history gone, so we say so plainly at the point of reactivation rather than leaving it to be discovered.
When a retention window ends the data is deleted automatically, not archived.
Your rights
- Ask what we hold about you, and get a copy.
- Correct anything wrong.
- Have it deleted — see the data deletion page.
- Object to processing based on our legitimate interests.
- Withdraw consent for marketing at any time, by replying STOP.
- Complain to your data protection authority.
We answer within 30 days. If a request is genuinely complex we may take up to 60 days more, and we will tell you why within the first 30 days.
Children
Botsmith is for businesses. It is not directed at children, and we do not knowingly collect data from anyone under 18. If you believe a child’s data has reached us, write to us and we will remove it.
Grievance officer
Under the Information Technology (Intermediary Guidelines) Rules, complaints may be addressed to our grievance officer: Ayaan Ansari, grievance@botsmith.in. We acknowledge within 24 hours and resolve within 15 days.
Changes to this policy
If we change how we handle your data we will update this page and change the "last updated" date. For anything material we will tell you in WhatsApp before it takes effect.
Contact
Questions about this document go to support@botsmith.in, or by post to Atomos Technologies OPC Private Limited, Howrah, West Bengal, India.