Privacy Policy

Last updated: April 15, 2026

1. Who We Are

Botami ("Botami", "we", "us", or "our") provides software tools that help merchants create, manage, and operate Telegram-based online stores, digital product flows, and service booking experiences. For the purposes of applicable data protection law, Botami acts as a data controller for personal data described in this Privacy Policy, except where we process data solely on behalf of our merchant customers.

2. Scope of This Policy

This Privacy Policy applies to personal data processed through:

• • the Botami marketing website (https://botami.pro);
• • the Botami CMS and account area (https://app.botami.pro);
• • merchant storefronts and mini apps powered by Botami (https://XXXX-XXXX.botami.store);
• • support, billing, and operational communications.

3. Definitions

In this Policy:

• •Account means your user account with Botami.
• •Personal Data means information that identifies you directly or indirectly.
• •Merchant means a business or individual using Botami to operate a storefront or service flow.
• •Service Providers means trusted third parties that help us operate, host, secure, analyze, or support the platform.
• •Telegram Data means account and session-related information transmitted through Telegram integrations, including Telegram Web App initialization data where applicable.

4. Information We Collect

We collect personal data from several sources, depending on how you interact with Botami.

4.1 Information you provide directly

• • name, email address, company name, and account credentials;
• • subscription details and payment status necessary to provide the service
• • information submitted through forms, support requests, or direct communications;
• • storefront content you create, such as product descriptions, pricing, catalog structure, service information, media, order settings, and merchant branding.
• • we do not store full payment card numbers, banking credentials, or financial account passwords

4.2 Information collected automatically

• • IP address, approximate geolocation, browser type, device type, operating system, language, referral source, and pages viewed;
• • timestamps, session events, feature usage, interaction data, and diagnostic logs;
• • cookie identifiers, local storage identifiers, and similar technical data where permitted.

4.3 Information from third-party or integrated services

• • payment-related status and transaction metadata from payment providers;
• • account or session-related data received through Telegram integrations;
• • technical event data from analytics, security, and infrastructure providers we use to operate the service.

5. How We Use Personal Data

We use personal data to:

• • create and manage accounts;
• • provide, maintain, and improve the Botami platform and related services;
• • process subscriptions, payments, invoices, renewals, and account changes;
• • personalize dashboards, storefront settings, and product experiences;
• • monitor performance, troubleshoot issues, and secure the platform;
• • detect, investigate, and prevent fraud, abuse, unauthorized access, and policy violations;
• • send service announcements, transactional notices, invoices, security alerts, and support replies;
• • comply with legal obligations and enforce our Terms of Use and related policies.

6. Legal Bases for Processing

Where applicable under laws such as the GDPR or UK GDPR, we process personal data under one or more of the following legal bases:

• •Performance of a contract — when processing is necessary to create accounts, provide paid services, manage subscriptions, or fulfill our obligations to users and merchants;
• •Legitimate interests — when processing is reasonably necessary to secure, maintain, improve, analyze, or administer our services, provided those interests are not overridden by your rights and freedoms;
• •Consent — where consent is required, including certain analytics, cookies, or optional communications;
• •Legal obligation — when we must process or retain data to comply with legal, tax, accounting, regulatory, or law enforcement requirements.

7. Telegram and Merchant Data Processing

Some Botami services are designed to operate inside or alongside Telegram experiences. In those cases, we may receive limited account, session, and interaction data from Telegram integrations in order to authenticate users, render storefront experiences, process orders, and maintain secure sessions. In many cases, Botami also processes customer and order data on behalf of the merchant that operates a specific storefront. In that context, the merchant may independently determine what customer data is collected, how it is used, and how long it is retained.

8. Data Sharing and Disclosure

We do not sell personal data. We share personal data only when necessary to operate and provide our services:

• • with service providers (hosting, analytics, payments, email) that help us run the platform;
• • with payment providers to process subscriptions and transactions;
• • with authorities if required by law;
• • in case of a business transfer (such as a merger or acquisition).

9. Cookies and Similar Technologies

We use cookies, local storage, and similar technologies to operate the website and platform, remember user preferences, maintain secure sessions, measure performance, and understand product usage. Some technologies are strictly necessary for core site functionality, while others are optional and used only where permitted under applicable law.

9.1 Categories of cookies we may use

• •Strictly necessary — required for security, session continuity, authentication, checkout stability, load balancing, language persistence, and core platform operation;
• •Functional — used to remember non-essential preferences and improve usability;
• •Analytics — used to understand traffic, diagnose performance, and improve service quality;
• •Marketing — used only if we run advertising, attribution, remarketing, or similar campaigns that require such technologies.

9.2 Managing cookies

You can manage cookies through your browser settings and, where available, through our cookie controls. Disabling strictly necessary cookies may affect site functionality. Optional analytics or marketing technologies should not be activated for users in jurisdictions that require prior consent until that consent has been obtained.

10. International Data Transfers

Personal data may be processed in countries other than your own. Where required by applicable law, we implement appropriate safeguards for cross-border transfers, such as contractual protections, internal security measures, and other recognized transfer mechanisms.

11. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes described in this Policy, including to provide services, maintain account records, comply with legal, tax, accounting, and security obligations, resolve disputes, and enforce agreements. Retention periods may vary depending on the nature of the data, the type of account, applicable law, and technical or contractual requirements. When data is no longer required, we delete it, anonymize it, or securely isolate it where deletion is not immediately possible.

12. Security Measures

We use a combination of technical and organizational safeguards designed to protect personal data, including encryption in transit where appropriate, access restrictions, logging, infrastructure controls, credential management, and internal operational procedures. No method of transmission over the internet or method of electronic storage is completely secure, so we cannot guarantee absolute security.

13. Your Privacy Rights

Depending on your location and applicable law, you may have the right to:

• • access the personal data we hold about you;
• • request correction of inaccurate or incomplete data;
• • request deletion of personal data in certain circumstances;
• • object to or restrict certain types of processing;
• • withdraw consent where processing is based on consent;
• • request portability of certain data where applicable;
• • opt out of marketing communications using the unsubscribe method included in such messages or by contacting us.

To exercise your rights, contact us using the details below. We may request reasonable information to verify your identity before processing a request.

14. Children’s Privacy

Botami is not directed to children under 16, and we do not knowingly collect personal data from children. If you believe that a child has provided personal data to us, please contact us so we can investigate and take appropriate action.

15. Business Transfers

If Botami is involved in a merger, acquisition, restructuring, financing transaction, sale of assets, or similar corporate event, personal data may be transferred as part of that transaction, subject to applicable confidentiality and legal protections.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, security practices, or business operations. When we make material changes, we will update the "Last updated" date on this page and may provide additional notice where appropriate.

17. Contact Us

If you have questions, requests, or concerns regarding this Privacy Policy or our data practices, please contact us at:
hello@botami.pro