Privacy Policy

1. Information We Collect

We collect information you provide directly and information collected automatically when you use our Service.

Information You Provide

• Account Information: Name, email address, and password when you register for an account
• Organization Information: Company name and team member details for organization accounts
• Payment Information: Billing address and payment details (processed securely by Stripe; we do not store full card numbers)
• API Credentials: API keys, access tokens, and webhook URLs you configure for third-party messaging services
• Configuration Data: Plugin settings, workflow rules, automation configurations, and preferences

Automatically Collected Information

• Usage Data: Features used, actions taken, workflow execution logs, and timestamps
• Device Information: Browser type, operating system, IP address, and device identifiers
• Performance Metrics: API response times, error rates, and credit consumption data

2. How We Use Information

We use the information we collect for the following purposes:

• Provide, operate, maintain, and improve our Service
• Process subscriptions, transactions, and credit-based billing
• Send technical notices, security alerts, and support communications
• Respond to your comments, questions, and customer service requests
• Monitor and analyze usage patterns, trends, and performance
• Detect, investigate, and prevent fraudulent or unauthorized activity
• Enforce our Terms of Service and protect our legal rights
• Comply with applicable laws, regulations, and legal obligations

3. Information Sharing and Disclosure

We do not sell, rent, or trade your personal information to third parties. We may share information in the following limited circumstances:

• Service Providers: Trusted third-party vendors that help us operate our business (payment processing, cloud hosting, analytics, error monitoring)
• Legal Requirements: When required by law, regulation, subpoena, court order, or legal process
• Safety and Protection: To protect the rights, property, safety, or security of ABC Legacy LLC, our users, or the public
• Business Transfers: In connection with a merger, acquisition, reorganization, or sale of assets, with advance notice to affected users
• With Your Consent: When you explicitly authorize us to share information

4. Data Security

We implement industry-standard technical and organizational security measures to protect your information:

• Encryption of data in transit (TLS 1.2+) and at rest (AES-256)
• Secure password hashing using bcrypt with appropriate work factors
• Regular security assessments and vulnerability scanning
• Role-based access controls and multi-factor authentication
• Encrypted storage of API credentials and access tokens
• Automated monitoring and alerting for suspicious activity

While we employ robust security measures, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security but will promptly notify affected users and relevant authorities in the event of a data breach, as required by applicable law.

5. Your Rights and Choices

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data ("right to be forgotten")
• Portability: Request a copy of your data in a structured, machine-readable format
• Restriction: Request restriction of processing of your personal data
• Objection: Object to processing of your personal data for certain purposes
• Withdrawal: Withdraw consent at any time where processing is based on consent

To exercise these rights, please contact us at [email protected]. We will respond to valid requests within 30 days, or as required by applicable law.

6. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect and track information and to improve our Service.

Types of Cookies We Use

• Essential Cookies: Required for the Service to function (authentication, session management, security)
• Preference Cookies: Remember your settings and preferences (theme, language, display options)
• Analytics Cookies: Help us understand how you use the Service to improve functionality and performance

You can control cookie preferences through your browser settings. Disabling certain cookies may affect Service functionality. We do not use cookies for targeted advertising.

7. Third-Party Services

Our Service integrates with third-party services that have their own privacy policies. We encourage you to review them:

• Stripe: Payment processing subject to Stripe's Privacy Policy
• AI Providers: When using AI features, data may be processed by third-party AI providers (e.g., OpenAI, Anthropic, Google) in accordance with their respective privacy policies
• Messaging APIs: When connecting to third-party messaging platforms, your data may be subject to those platforms' privacy policies
• Cloud Infrastructure: Our Service is hosted on secure cloud infrastructure with its own data processing agreements

We are not responsible for the privacy practices of third-party services. We recommend reviewing the privacy policies of any services you connect through our platform.

8. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. Specific retention periods:

• Account data: Retained until account deletion request is fulfilled
• Usage and workflow logs: Retained for 90 days
• Payment and billing records: Retained for 7 years (legal/tax requirement)
• Security and audit logs: Retained for 1 year
• Backups: Retained for 30 days after data deletion

After account deletion, we will remove or anonymize your personal data within 30 days, except where retention is required by law or for legitimate business purposes documented above.

9. Children's Privacy

Our Service is designed for business use and is not intended for children under 18 years of age. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take immediate steps to delete that information and terminate the associated account.

10. International Data Transfers

Your information may be transferred to and processed in the United States or other countries where our service providers operate. These countries may have different data protection laws than your country of residence. We implement appropriate safeguards — including standard contractual clauses and data processing agreements — to ensure your information remains protected in accordance with this Privacy Policy and applicable data protection laws.

11. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to request deletion, and the right to opt out of the sale of personal information. As stated above, we do not sell personal information. To exercise your CCPA rights, contact us at [email protected].

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

For material changes, we will provide additional notice via email or through the Service at least 30 days before the changes take effect. Your continued use of the Service after the updated policy becomes effective constitutes acceptance of the changes.

13. Contact Us

If you have questions about this Privacy Policy, our data practices, or wish to exercise your data rights, please contact us:

• Company: ABC Legacy LLC
• Address: 30 N Gould St Ste R, Sheridan, WY 82801, United States
• Email: [email protected]
• Website: https://2bot.org