Privacy Policy
BotFast (“we”, “us”) provides an AI assistant that works inside your WhatsApp account. This policy explains what we collect, why, and the controls you have over your data.
1. Who we are
BotFast operates at the https://botfast.co You can reach us at raihan@botfast.co for any privacy question or data request.
2. Information we collect
To run the assistant on your behalf, we collect:
- Account information. Your WhatsApp phone number, display name, and (if you connect Google) the email address associated with your Google account.
- WhatsApp session data. The encrypted credentials and keys produced when you scan the QR code to link the bot as a WhatsApp device. These are stored so the bot can stay connected on your behalf.
- Messages and media. The content of messages sent to and from your linked number, including text, images, voice notes, and documents, where the bot is involved in the conversation.
- Memory, skills, and settings. The instructions, contacts, long-term memories, scheduled tasks, and preferences you create through the bot or the dashboard.
- Google data (only if you connect). OAuth tokens and the Calendar, Gmail, Drive, Sheets, and Docs content the assistant needs to act on your requests. We never sell or use this data for advertising.
- Billing data. Plan, subscription status, and credit usage. Card details are handled by our payment processor (Creem) — we never see or store card numbers.
- Operational data. Basic logs (timestamps, error traces, credit-usage events) used to keep the service running and prevent abuse.
3. How we use it
We use the data above to:
- Generate text replies, run skills, schedule tasks, and handle media on your behalf.
- Maintain a persistent WhatsApp connection for your linked device.
- Operate billing and credit tracking, including sending renewal and low-credit notices.
- Provide customer support when you contact us.
- Detect fraud, abuse, and security incidents.
- Improve the product (in aggregate — we do not train public AI models on your messages).
BotFast does not generate images, videos, GIFs, or stickers. The assistant can read images you send (for example, to extract text or describe their contents) but it never creates new visual media.
4. Third-party processors
BotFast uses a small number of trusted services to deliver its features. Your data flows through them only as needed:
- Google APIs — Calendar, Gmail, Drive, Sheets, Docs and YouTube search (only if you connect).
- Creem — subscription billing and payment processing.
- WhatsApp / Meta — the messaging surface the bot operates on.
Each processor is bound by its own terms and security commitments. We do not sell your personal data to anyone.
5. Data retention and account control
We keep your account data for as long as your account is active. Message and media content is retained so the assistant can reference past context. You can delete individual memories, skills, scheduled tasks, and conversations from the dashboard at any time, and you can ask us to delete your entire account by emailing raihan@botfast.co.
You can cancel your subscription at any time from the billing dashboard at /dashboard/billing. New subscriptions are eligible for a full refund within 3 days of purchase — email raihan@botfast.co to request one.
When you disconnect Google, we delete the stored OAuth tokens. When you force-logout the WhatsApp device, the session credentials are wiped — to use the bot again you must scan a fresh QR code.
6. Security
Data is transmitted over TLS and stored on encrypted, access-controlled infrastructure. WhatsApp session credentials and OAuth tokens are stored as structured records in our database and used only by the bot runtime. No system is perfectly secure — if you spot an issue, please report it to raihan@botfast.co.
7. Your rights
Depending on where you live, you may have the right to access, correct, export, or delete the personal data we hold about you, and to object to or restrict certain processing. To exercise any of these rights, email us at raihan@botfast.co from the address linked to your account. We respond within 24 hours.
8. Children
BotFast is not intended for children under 13 (or the minimum age required in your country). We do not knowingly collect data from children. If you believe a child has signed up, please contact us and we will delete the account.
9. International users
BotFast uses cloud providers in multiple regions. By using the service you consent to your data being processed in those regions, subject to the protections described in this policy.
10. Changes to this policy
We may update this policy as the product evolves. When we make material changes, we will update the effective date above and, for significant changes, notify you through the bot or by email.
11. Contact
Questions, requests, or complaints? Email raihan@botfast.co.