Privacy policy

Effective 1 November 2026

The data controller is Adido Ventures Sàrl, Switzerland (hello@botalive.dev). This policy follows the Swiss Federal Act on Data Protection and, where it applies to you, the EU GDPR.

What we collect

• Account data: email address, plan, timezone, hashed API key, Stripe customer id. Needed to run your account (contract).
• Monitoring data: monitor names, bot labels, timestamps, status, run duration and any short note or metadata your agent chooses to send. You control what your agent sends; avoid putting personal data in notes.
• Alert channels: email addresses and webhook URLs you add.
• Backups (Pro/Team): files your agent uploads. Stored encrypted at rest, never opened by us, last 14 kept.
• Technical logs: request logs held by our hosting providers for up to 7 days for security and debugging.

We do not use advertising trackers or analytics cookies. The dashboard uses one authentication cookie/local storage entry to keep you signed in.

Where it is stored

Database, authentication and file storage: Supabase, region eu-central-2 (Zurich, Switzerland). Website and API edge: Cloudflare (global network, static assets and request routing only). Payments: Stripe Payments Europe Ltd (Ireland); we never see your card number. Email delivery: Resend (US, under standard contractual clauses). We do not sell data or share it with anyone else.

Retention

Heartbeat history is deleted after 7 days (Free), 90 days (Pro) or 365 days (Team). Alert logs are kept 12 months. Backups: the 14 most recent. Everything is deleted immediately when you delete your account; Stripe retains invoice records as required by accounting law.

Your rights

You can access, export, correct and delete your data from the dashboard at any time, or email us. You may also complain to the Swiss FDPIC or your local supervisory authority.

Changes

We will email you about material changes to this policy at least 14 days before they take effect.