In short
This page puts our official privacy policy into plain language. The full official version is the binding text and applies if anything here differs.
01Introduction
This policy explains how Botfinity Inc. (“we”, “us”) handles personal data when you use SuperMIA and its agents, including MailPilot. By using the services, you acknowledge the practices described here.
02Categories of personal data we collect
Depending on how you use the services, we may collect:
- Chat and voice input you provide, and the resulting transcripts
- Profile information, such as your name and contact details
- Usage and device data about how the services are accessed
- Gmail data, only when you choose to connect Gmail
03Purposes of processing and legal basis
We process personal data to provide the services you request, keep them secure and reliable, support you, and meet our legal obligations. Each use relies on an appropriate legal basis, such as performing our agreement with you or your consent.
04Google API Limited Use compliance
Our use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.
05AI processing of Gmail data
When you connect Gmail, MailPilot processes that data to draft replies and run the automation you ask for.
- Used only for user-requested automation
- Not used for advertising
- Not used to train generalised AI models
06Data recipients
We share personal data only where needed to run the services, for example with service providers who process it on our behalf, or where the law requires it.
07Data security
We protect your data with AES-256 encryption, alongside technical and organisational safeguards.
08International data transfers
Your data may be transferred to and processed by service providers in India, the United States and other jurisdictions.
09Data retention and deletion
We keep data only as long as needed:
- OAuth tokens are deleted within 24 hours of revoking Gmail access
- Account data is deleted within 30 days of account deletion
- Voice recordings and models are kept no longer than 3 years after your last interaction, unless the law requires otherwise
10Your rights
Depending on where you live, you may have rights over your personal data, such as access, correction and deletion. To make a request, contact us using the details below.
11SMS and text messaging
Mobile opt-in data is not sold or shared with third parties for marketing purposes.
12Updates to this policy
We may update this policy from time to time. The date at the top of this page shows when it last changed.
13Contact
Questions about this policy? Write to us, and a real person will reply.
