1. Introduction and scope
This Privacy Policy describes how B6AI ("B6AI", "we", "us", or "our") handles personal data in connection with the B6AI platform, websites, applications, APIs, and related services (the "Service").
It applies to personal data of visitors to our websites, of the customers and users who register for and administer accounts, and of the End Users who interact with Bots built on the Service. It should be read together with our Terms & Conditions and any Data Processing Addendum that applies to you.
2. Our roles: controller and processor
B6AI plays two different roles depending on the data involved, and this affects your rights and who is responsible.
- As a controller: for personal data about our direct customers and their users (for example account registration, billing, support, and website usage), B6AI decides how and why the data is processed and acts as the controller.
- As a processor: for the End User Data that flows through Bots and agent conversations (for example messages, contact identifiers, and profile information from a connected channel), our customer is the controller and B6AI acts as a processor, handling that data on the customer instructions to provide the Service.
- If you are an End User who interacted with a Bot, the business that operates that Bot is responsible for its handling of your data as controller. Please direct requests about that data to that business; we will support them in responding.
3. Information we collect
We collect the categories of information below. Not all categories apply to every person.
| Category | Examples | Source |
|---|---|---|
| Account and profile data | Name, work email, phone, company, role, workspace settings | You, when you register and configure your account |
| Billing data | Plan, billing contact, tax identifiers, transaction records (card details are handled by our payment provider, not stored by us) | You and our payment provider |
| Customer Content | Bot flows and configurations, knowledge base documents, prompts, and instructions | You, within your workspace |
| End User Data | Messages, channel identifiers (for example a phone number or social handle), profile fields, and conversation metadata | End Users, via connected channels, processed on behalf of our customer |
| Integration data | Data exchanged with connected tools you authorize (for example CRM, helpdesk, e-commerce, or calendar records) | The third-party integrations you connect |
| AI processing data | Inputs and outputs sent to and returned from AI models to understand messages and generate responses | Generated during use of AI features |
| Usage and device data | Log data, IP address, device and browser type, pages viewed, and actions taken | Automatically, when you use the Service or websites |
| Cookies and similar technologies | Identifiers used for authentication, preferences, security, and analytics | Your device, via cookies and the web widget |
| Support and communications | Messages you send us, and records of support interactions | You |
4. How we use information
We use personal data to operate and improve the Service and to run our business, including to:
- Provide, maintain, and secure the Service, and create and manage your account and workspace.
- Understand messages and generate responses using AI and natural language processing.
- Process payments, manage subscriptions, and send billing and transactional communications.
- Provide support, respond to inquiries, and communicate about changes, security, and service updates.
- Monitor, prevent, detect, and address fraud, abuse, security incidents, and violations of our Terms.
- Analyze usage to understand performance, troubleshoot, and improve features and reliability.
- Comply with legal obligations and enforce our agreements.
- With your consent where required, send marketing communications about B6AI; you can opt out at any time.
5. Artificial intelligence and model providers
To power conversational features, we send inputs (such as messages and knowledge base context) to AI models, which may be operated by third-party AI providers acting as our sub-processors. Those providers process the data to return a response and under our agreements are restricted from using it for their own independent purposes.
We do not sell personal data, and we do not use your Customer Content or End User Data to train foundation models for our own or third parties general-purpose use except with appropriate authorization or where required to provide a feature you request. We may use aggregated or de-identified information, which cannot reasonably be used to identify you, to operate and improve the Service.
6. Legal bases for processing
Where data protection laws such as the GDPR apply, we rely on the following legal bases:
- Performance of a contract: to provide the Service to you and administer your account.
- Legitimate interests: to secure, support, analyze, and improve the Service, and to run our business, balanced against your rights.
- Consent: for certain marketing and cookies, where required; you may withdraw consent at any time.
- Legal obligation: to comply with laws, taxes, and lawful requests.
- For End User Data we process as a processor, our customer is responsible for establishing the legal basis for that processing.
8. Representative sub-processors
We use categories of sub-processors to deliver the Service. Representative categories include the following; a current list is available on request and, where applicable, in your Data Processing Addendum.
| Category | Purpose |
|---|---|
| Cloud infrastructure and hosting | Run and store the Service and its databases |
| AI and natural language providers | Understand messages and generate responses |
| Payment processing | Process subscription payments and billing |
| Messaging channel providers | Deliver and receive messages on connected channels |
| Email and notification delivery | Send transactional and support communications |
| Analytics and monitoring | Measure performance, reliability, and security |
9. International data transfers
We and our sub-processors may process personal data in countries other than your own. Where we transfer personal data across borders, we use appropriate safeguards required by applicable law, such as standard contractual clauses or equivalent mechanisms, to protect the data.
10. Data retention
We retain personal data for as long as needed to provide the Service, comply with our legal obligations, resolve disputes, and enforce our agreements. Retention periods vary by data type and context; for example, account and billing records are kept for the life of the account and any period required by law, while conversation data is retained according to your configuration and our default retention practices. When data is no longer needed, we delete or de-identify it.
11. Security
We implement technical and organizational measures designed to protect personal data, including encryption of data in transit and at rest, access controls and role-based permissions, isolation of workspace data, secure handling of credentials and secrets, logging, and monitoring. No method of transmission or storage is completely secure, and we cannot guarantee absolute security; you are also responsible for protecting your credentials and configuring your workspace securely.
13. Your rights and choices
Depending on where you live and the applicable law, you may have rights over your personal data, including the right to:
- Access the personal data we hold about you and receive a copy.
- Correct inaccurate or incomplete data.
- Delete your data, subject to legal and contractual limits.
- Restrict or object to certain processing, including direct marketing.
- Data portability, where applicable.
- Withdraw consent where processing is based on consent.
- Lodge a complaint with your local data protection authority.
14. How to exercise your rights
If we are the controller of your data, you can exercise your rights by contacting us at info@b6ai.ai. We will verify your request and respond within the time required by applicable law.
If your data was processed by a Bot operated by one of our customers, we act as a processor and the customer is the controller. In that case, please contact the relevant business directly; if you contact us, we will forward your request to that customer and support them in responding.
15. Children privacy
The Service is intended for businesses and is not directed to children. We do not knowingly collect personal data directly from children under the age required by applicable law. If you believe a child has provided us personal data as a direct user, please contact us so we can take appropriate action.
16. Third-party links and services
The Service and our websites may link to or interoperate with third-party sites and services that are governed by their own privacy policies. We are not responsible for the privacy practices of those third parties, and we encourage you to review their policies.
17. Changes to this Policy
We may update this Privacy Policy from time to time. If we make material changes, we will provide notice by posting the updated Policy with a new effective date and, where appropriate, by notifying you within the Service. Your continued use of the Service after the changes take effect constitutes acceptance of the updated Policy.
18. Contact us
For privacy questions or to exercise your rights, contact us at info@b6ai.ai. If you are in a jurisdiction that requires a designated grievance or data protection contact, you may address your correspondence to the same address, and we will route it appropriately.