Two roles, two sets of duties
For your account, billing and website visits, Juboto decides how data is used and is responsible for it. For the conversations your customers have on your channels, you decide how that data is used, and Juboto processes it on your instructions to run your bot and helpdesk.
What we collect about businesses
- Signup and account details: name, work email, business name, website, industry, channels and expected volume.
- Billing details: plan, invoices, GST number where provided. Card and UPI payments are handled by our payment provider; we do not store full card numbers.
- Product usage: features used, settings, sign-in times and device information, used to run and improve the service.
- Messages you send our sales and support desks.
What the bot processes for you
- Knowledge you upload or connect: FAQs, policies, website pages, catalogues and documents.
- Customer conversations on connected channels, including names, phone numbers, email addresses, order numbers and attachments customers choose to send.
- Data fetched from your systems by Order Actions, limited to the fields each action needs.
What we never do with conversation data
- We never use your content or your customers' conversations to train bots for other businesses.
- We never sell conversation data or share it for advertising.
- The bot never asks customers for card numbers, CVVs, OTPs for payments or banking passwords.
AI processing
To write answers, Juboto sends the relevant part of a conversation and the matching passages from your approved content to large language model providers. We use providers that contractually agree not to train on this data and to delete it after processing, apart from short-term logs kept for abuse monitoring.
Where data is stored and how it is protected
Data is encrypted in transit with TLS 1.2 or later and at rest with AES-256. Access by our staff is limited to support and operations roles, requires multi-factor sign-in and is logged. Backups are encrypted and kept for 30 days.
How long we keep it
- Conversations: 90 days on Mini Bot, 12 months on Helper Bot, and a period you choose on Mega Bot.
- Knowledge sources: until you delete them or close your account.
- Account and billing records: as long as the law requires, typically 8 years for invoices.
When an account is closed, conversation data and knowledge sources are deleted within 30 days, and from backups within a further 30 days.
Your customers' rights
If one of your customers asks to see, correct or delete their conversations, you can export or delete them from the Helpdesk. If they contact us directly, we pass the request to you and help you respond.
Your rights as an account holder
You can ask for a copy of your account data, correct it, or ask us to delete it, subject to records we must keep by law. Under India's Digital Personal Data Protection Act, 2023, you can also withdraw consent and raise a grievance with us.
Cookies on this website
This website uses only the cookies needed for it to work and to remember your choices. The chat widget you install for your customers sets a single cookie to keep a conversation together across pages.
Subprocessors
We use cloud hosting, email delivery, payment processing, messaging platform providers such as Meta for WhatsApp, Instagram and Facebook, and language model providers. Mega Bot customers can request the current list and are told before a new subprocessor is added.
Changes and questions
If we make a material change to this policy, we'll tell account owners by email before it applies. For privacy questions or requests, open a ticket on the Help Bench.