Privacy Policy

The website https://botts.ai is subject to Swiss data protection law, in particular the Federal Act on Data Protection (FADP). For data subjects in the EU/EEA, we additionally comply with the EU General Data Protection Regulation (GDPR). The EU recognises that Swiss data protection law provides an adequate level of data protection.

We are very pleased about your interest in our website. Data protection is of particularly high importance to us. As a rule, the website can be used without providing any additional personal data. However, if a person wishes to use specific services through our website, additional processing of personal data may be required. Where such additional processing of personal data is necessary and where there is no other statutory basis for it, we generally obtain the consent of the data subject concerned.

The processing of personal data — for example a data subject's name, address, e-mail address or telephone number — is always carried out in accordance with statutory data protection requirements. With this privacy policy, we wish to inform the public about the nature, scope and purpose of the personal data we collect, use and process. Furthermore, this privacy policy informs data subjects of the rights to which they are entitled.

botts.ai, as the controller, has implemented numerous technical and organisational measures to ensure the most complete protection possible of the personal data processed via this website. Nevertheless, internet-based data transmissions may in principle exhibit security vulnerabilities, so absolute protection cannot be guaranteed. For this reason, every data subject is free to transmit personal data to us through alternative means, for example in writing (postal mail) or by telephone.

1. Contact Details of the Controller

The controller within the meaning of the law is:

botts.ai gmbh
Neugasse 15
6300 Zug, Switzerland

E-mail: info@botts.ai

2. Collection and Storage of Personal Data, Type and Purpose of Use

a) When visiting the website

When you access the website https://botts.ai, the browser used on your end device automatically sends information to the server of our website. This information is temporarily stored in a so-called log file. The following information is recorded without your action and stored until automated deletion:

IP address of the requesting computer
Date and time of access
Name and URL of the file accessed
Website from which access is made (referrer URL)
Browser used and, where applicable, the operating system of your computer and the name of your access provider

We process the above-mentioned data for the following purposes:

ensuring a smooth connection to the website
ensuring comfortable use of our website
evaluating system security and stability, and
for further administrative purposes.

In no event do we use the data collected for the purpose of drawing conclusions about your person. Furthermore, when you visit our website we use cookies (see clause 4 below) and analytics tools (see clause 5).

b) When using the chatbot

The botts.ai chatbot can be used both on our own website and on the websites of our customers without providing any personal data.

For the chatbot on the botts.ai website, we use OpenAI as the LLM provider.

For customer bots: By default (Switzerland First), all data (inputs, documents, chat logs) processed via the chatbot remains exclusively within Switzerland. This includes processing by LLMs and databases hosted by our Swiss partner Infomaniak (ISO-certified).

Customers have the option of explicitly enabling more powerful models from international providers. Only in such cases is data transmitted to the corresponding providers (e.g. OpenAI, Anthropic). As a matter of principle, no training is carried out on the transmitted data ("Zero Training Policy"). Your data belongs to you.

c) When using voice/phone agents

Where you interact with a voice or phone agent (for example a call to a phone number provided by us or our customers), telecommunications are handled via Twilio, and the audio is transmitted to Microsoft Azure for speech recognition and speech synthesis (preferably in the Switzerland North region; in exceptional cases Sweden Central or East US 2). The content of the conversation is processed in real time. If the relevant business customer has activated recording or transcription, this data is stored in accordance with that customer's privacy policy. In such cases, callers are informed accordingly at the beginning of the conversation.

d) When using the free mini-tools (e.g. Web Page Roast)

We provide free tools on our website. For example, when you use the Web Page Roast and enter a URL:

Our crawler (hosted on Modal Labs) loads the specified page and creates screenshots in desktop and mobile resolution.
The extracted content and screenshots are transmitted to Anthropic Claude (hosted on Microsoft Azure) for analysis.
The result is stored on our Swiss object storage (Infomaniak) for 30 days and is accessible via an unguessable permalink. Afterwards it is automatically deleted.
We set a cookie (roast_id) to limit requests per browser. This cookie contains only a random identifier and no personal data.
No additional personal data is collected, except for the server log-file data set out in clause 2 lit. a.

3. Disclosure of Data

A transfer of your personal data to third parties — e.g. IT service providers, logistics companies or other processors — for purposes other than those listed below does not take place. We only pass your personal data on to third parties if:

you have given your express consent to this,
this is necessary to assert, exercise or defend legal claims and there is no reason to assume that you have an overriding legitimate interest in the non-disclosure of your data,
there is a statutory obligation to disclose, and
this is permitted by law and necessary for the performance of contractual relationships with you.

As a provider of AI chatbots, we enable our business customers to view the interactions between end users and the chatbot. This data may be used by the customers exclusively for the contractually agreed purposes, e.g. for the improvement of services or the analysis of customer enquiries. Access takes place via a secure interface that ensures data protection. Responsibility for the protection of this data lies with the respective business customer.

4. Cookies

We use cookies on our website that are necessary for the functionality of our website, cannot be disabled in our systems and are not personalised. These are small files that your browser automatically creates and that are stored on your end device (laptop, tablet, smartphone, etc.) when you visit our site. Cookies do no damage to your end device and contain no viruses, Trojans or other malware. The use of cookies increases the user-friendliness and security of our website.

The cookie stores information that arises in connection with the specific end device used. This does not, however, mean that we directly obtain knowledge of your identity.

Most browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer or so that a notice always appears before a new cookie is created.

5. Analytics Tools

a) Google Analytics

We use Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. The cookies used by Google Analytics are stored on your computer and enable an analysis of your use of the website.

The information generated by the cookie about your use of this website is generally transferred to a Google server in the USA and stored there. Such cookies may, for example, contain the following information: IP address, number, date and time of the visit, duration of the visit, your access page from which you use the website (referring URL), the pages visited on this website, browser type/version and operating system used.

On this website, the IP-anonymisation function is activated (so-called IP masking). This means that your IP address is shortened by Google within member states of the European Union, in other contracting states of the Agreement on the European Economic Area, and in Switzerland, before being transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there.

You can prevent the storage of cookies by setting your browser software accordingly. However, in this case you may not be able to fully use all functions of this website. You can also prevent the recording of personal data generated by the cookie and relating to your use of the website (incl. your IP address) by Google, as well as the processing of this data by Google, by downloading and installing the browser add-on available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en. Further information on how Google handles user personal data in Google Analytics can be found in Google's privacy policy: https://support.google.com/analytics/answer/6004245?hl=en.

6. Third-Party Services

We use third-party services in order to be able to provide our offer in a stable, user-friendly, secure and reliable manner. Such services also enable content to be embedded in our website. Such services — for example hosting and storage services — require your Internet Protocol (IP) address, as they would otherwise be unable to deliver the corresponding content. Such services may be located outside Switzerland and the European Economic Area (EEA) (e.g. USA), provided that an adequate level of data protection is ensured.

a) Infomaniak (Switzerland)

Our primary infrastructure for hosting and databases is provided by Infomaniak in Switzerland. Infomaniak is subject to Swiss data protection law and not to the US Cloud Act.

b) AWS and Microsoft Azure (Optional)

Our partners AWS and Microsoft Azure provide us with optional server and database services (e.g. for specific document analyses). These services include the secure storage and processing of data. Processing primarily takes place in Switzerland/EU.

c) OpenAI and Anthropic (Optional)

Customers have the option of selecting more powerful models from international providers — in particular OpenAI and Anthropic (the latter via Microsoft Azure AI Foundry) — for processing. The exact configuration of the bot and the choice of models may vary. Customers can configure their own settings, as a result of which data may be transferred to the EU or the USA. Both providers guarantee compliance with high security and data protection standards (Zero Training Policy). For further questions on this, we recommend contacting us or the respective customer directly.

d) swisstopo / GeoAdmin (Switzerland)

When you enter a billing address with Switzerland selected as the country, the text you type in the address line is transmitted to swisstopo (the Swiss Federal Office of Topography) via its public GeoAdmin address-search API (api3.geo.admin.ch) to return matching address suggestions. This lookup is processed in Switzerland by a Swiss federal authority; no data is transferred abroad. It is triggered only for Swiss billing addresses — if you enter no billing address, or select another country, no address data is sent to swisstopo. See geo.admin.ch.

7. Sub-processors

In the context of providing our services, we use the following sub-processors:

Infomaniak (Switzerland) — hosting, database, object storage and Swiss AI models.
Microsoft Azure (Switzerland / EU / USA) — OpenAI and Anthropic models as well as realtime speech models.
Anthropic (USA, via Microsoft Azure Foundry) — language models (Claude).
OpenAI (USA) — optional GPT-family language models.
Modal Labs (USA) — container infrastructure for crawl and screenshot services.
Twilio (EU / USA) — telecommunications for voice, SMS and WhatsApp channels.
Stripe (EU / USA) — payment processing and subscription management.
Lettermint (EU) — sending of transactional e-mails.

This list is updated on an ongoing basis. A data processing agreement (see clause 8) governs the legal basis of the data processing.

8. Data Processing Agreement (DPA)

For our (Enterprise) business customers, we provide a standardised Data Processing Agreement (DPA) which contractually governs compliance with the FADP and the GDPR. Please contact us for a template.

9. Forwarding

References and links to third-party websites are outside our area of responsibility and control. No liability is assumed for such websites. The access to and use of such websites is at the user's own risk. There is no separate notice if you, as the user, leave the website. In the case of a forwarding to another website, the privacy policy of the respective provider must be observed.

10. Rights of Data Subjects

You have the

Right of access: you can request information about your personal data processed by us.
Right to rectification: you can request the correction of inaccurate or completion of your personal data stored with us.
Right to erasure: you can request the deletion of your personal data stored with us, unless processing is required for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise or defence of legal claims.
Right to restriction of processing: you can request the restriction of the processing of your personal data.
Right to data portability: you can receive personal data you have provided to us in a structured, commonly used and machine-readable format.
Right to lodge a complaint: you can complain to a competent supervisory authority about botts.ai.

11. Data Security

When you visit the website, we use the widespread SSL/TLS protocol (Secure Socket Layers / Transport Layer Security) in conjunction with the highest level of encryption supported by your browser.

We otherwise use suitable technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or total loss, destruction or unauthorised access by third parties. Our security measures are continuously improved in line with technological developments.

12. Currentness and Amendment of This Privacy Policy

Due to the further development of our website and offers above and beyond it, or due to changed legal or regulatory requirements, it may be necessary to amend this privacy policy.

The current privacy policy can be retrieved and printed out at any time on the website at https://botts.ai.

This privacy policy is currently valid and dated May 2026.

In the case of translations of this privacy policy into other languages, the German version is legally authoritative in case of doubt.