Legal document

GDPR

Last updated:

July 1, 2026

This document explains how BuilderBot Cloud processes the personal data of users located in the European Economic Area (EEA) under the General Data Protection Regulation (GDPR, Regulation (EU) 2016/679), and what rights you have as a data subject. It complements, and does not replace, our Privacy Policy.

1. Scope

This notice applies to anyone located in the EEA who visits our website or uses the builderbot.cloud platform, regardless of where their business is established.

2. Data controller

BuilderBot Cloud, LLC 1111b South Governors Avenue, STE 23416, Dover, DE 19904, United States Email: support@builderbot.cloud

3. Legal bases for processing

We process your personal data based on one or more of the following legal bases under Article 6 of the GDPR:

Performance of a contract: to provide the service you have subscribed to (creating and managing chatbots).
Consent: when you explicitly grant it, for example when connecting your Google, WhatsApp, or Instagram account.
Legitimate interest: to improve the platform's security, performance, and functionality.
Legal obligation: when we must retain or disclose information to comply with applicable law.

4. What data we process

The full breakdown of the categories of data we collect (account data, WhatsApp/Instagram messaging, Google integrations, etc.) is described in our Privacy Policy. In summary, we process:

Identification and contact data (name, email address).
Chatbot configuration and conversation flow data.
Messaging data necessary to operate the integrations you enable (WhatsApp Business, Instagram, Google Drive/Sheets/Docs).
Technical platform usage data.

5. Data processors and recipients

We do not sell your personal data. We only share data with the providers strictly necessary to operate the service, acting as data processors:

Infrastructure and hosting: Vercel, AWS, Railway, MongoDB, Prisma Cloud.
Artificial intelligence providers: OpenAI, Anthropic, Groq.
Messaging platforms: Meta (WhatsApp and Instagram), when you enable those integrations.

6. International data transfers

Our infrastructure and AI providers are located outside the EEA, primarily in the United States. When we transfer personal data outside the EEA, we rely on safeguards recognized by the GDPR, such as the European Commission's Standard Contractual Clauses or equivalent adequacy mechanisms offered by those providers.

7. Retention period

We retain personal data for as long as necessary to provide the service and comply with our legal obligations. After account cancellation, your data is permanently deleted within a maximum of 30 days, unless a different retention period is required by law.

8. Your rights as a data subject

Under the GDPR, you have the right to:

Access: obtain confirmation of whether we process your data and a copy of it.
Rectification: correct inaccurate or incomplete data.
Erasure ("right to be forgotten"): request the deletion of your personal data.
Restriction of processing: request that we restrict the use of your data in certain circumstances.
Portability: receive your data in a structured, commonly used format, or request its transfer to another controller.
Objection: object to processing based on legitimate interest.
Withdraw consent at any time, without affecting the lawfulness of processing carried out prior to withdrawal.
Not be subject to automated decisions that produce significant legal effects on you, without human intervention.

9. How to exercise your rights

You can exercise any of these rights by emailing support@builderbot.cloud, indicating the right you wish to exercise and the information needed to verify your identity. We will respond to your request within a maximum of 30 days.

10. Right to lodge a complaint

If you believe the processing of your personal data infringes the GDPR, you have the right to lodge a complaint with the data protection authority of your country of residence in the European Union.

11. Data security

We apply reasonable technical and organizational measures to protect your data, including encryption in transit (HTTPS/TLS), restricted access limited to authorized personnel, and secure storage at rest.

12. Minors

Our services are not directed to individuals under 18 years of age, and we do not knowingly collect personal data from minors.

13. Cookies and tracking technologies

We currently use Google Tag Manager and Meta Pixel for analytics and campaign measurement. You can manage or block these technologies through your browser's cookie settings. We are working on introducing a cookie preference center to give you more granular control.

14. Changes to this notice

We may update this document periodically. The "Last updated" date at the top of this page reflects the current version.

15. Contact

BuilderBot Cloud, LLC

Address: 1111b South Governors Avenue, STE 23416, Dover, DE 19904, United States
Email: support@builderbot.cloud