Privacy policy

Last updated: 10 October 2026

TheBotBazar (thebotbazar.com and the TheBotBazar apps for iOS and Android) is operated by ThimiTech, Kathmandu, Nepal. This policy explains what we collect and what we do with it.

What we collect

- Account data — email address, name, username, password (stored hashed), avatar, bio, time zone. - Content you add — bots, documents and websites you train them on, Q&A pairs, prompts, and settings. - Conversations — messages you send to bots and their replies, including chats with other makers' public bots. Voice receptionist calls are transcribed; transcripts are stored with the call. - Microphone audio — only while you are on a voice call you started. Audio is streamed to the speech provider for that receptionist and is not kept as a recording unless the receptionist's owner enables call recording. - Wallet and usage — token balance, token spend per chat or call, and purchase history. Card and wallet payments on the website are handled by Stripe, eSewa or Khalti; we never see your full card number. The mobile apps do not sell tokens. - Technical data — IP address and request logs, kept for security and abuse prevention. - How you found us — if you arrive through a link with campaign tags (such as utmsource), a referral or "Powered by TheBotBazar" badge link, or from another website, we set one first-party cookie, bbsrc, for up to 30 days. It records those tags, the other website's domain name (not the full address) and the page you landed on. If you then sign up, it is saved with your account so we can see which channels bring people to TheBotBazar. We only report it as totals per channel, never per person, and we don't share it with advertisers.

We do not use advertising SDKs or third-party analytics trackers, and we do not sell personal information.

Why we use it

To run the service (answer chats, train bots, place calls, bill tokens), keep accounts secure, prevent abuse, and send account emails such as activation and password reset. We send product tips and news by email only if you tick the box for them when you sign up; you can opt out at any time, and we record when you gave or withdrew consent.

Who processes it

To answer a message or call, the relevant text or audio is sent to the AI and voice providers the bot or receptionist is configured to use — for example OpenAI, Anthropic, Google, DeepSeek, Groq, ElevenLabs, Microsoft Azure, Deepgram, Cartesia, AssemblyAI, Sarvam and Rime — and to LiveKit for real-time audio. If you connect WhatsApp, Discord or email, messages pass through those services. Payments go through Stripe, eSewa or Khalti. These providers process the data only to deliver that request.

Public content

Bots you publish to the marketplace, your public maker profile, ratings and comments are visible to everyone.

Retention and deletion

Data is kept while your account exists. You can delete your account at any time from Settings → Account → Delete account on the website or in the app. This permanently removes your account and the bots, knowledge bases and conversations it owns.

If you can't sign in, email [email protected] from your account's email address and we will delete the account for you.

Children

TheBotBazar is not directed at children under 13, and we do not knowingly collect their data.

Security

Traffic is encrypted with HTTPS. Third-party credentials you store (for example API keys for connectors) are encrypted at rest.

Changes and contact

We will update this page when our practices change. Questions: [email protected].