Vai al contenuto

Privacy Policy

Versione 2.3 · Pubblicata il 6 ottobre 2026

Questo documento è attualmente disponibile solo in inglese; fa fede la versione inglese.

Privacy Policy

Version 2.3 · in force from 10 November 2026. Previous version: 2.2, which this notice replaces in full. This document is available in English only; the English version is the authentic text.

Publisher. Domor Tech OÜ, a private limited company under Estonian law (osaühing), registry (Äriregister) no. 17473139, VAT EE102971707, registered office Tööstuse tn 75-71, 10416 Tallinn, Estonia. Contact: [email protected]. The platform is ANYBOT at any.bot ("we", "us").

Shared definitions. Space · your workspace. AI Agent · an assistant you build on our AI. Knowledge · files you give an Agent. Member · a person you invite to a Space. Contact / End User · someone who talks to your Agent. Content · anything you upload, enter, or generate, plus your Agents' conversations. Plan · your subscription for a Space. Anybot Tokens · the unit that measures usage. Consumer · a person acting outside a trade or profession; Business User · everyone else.

Who we are. Domor Tech OÜ (details above) is the controller for your account, billing and support data. For the data your Agents process about your End Users, you are the controller and we are your processor under the Data Processing Agreement.

1. What we collect. Name, email, password, and any phone number you give us; billing details and tax ID (not full card numbers, Stripe handles those); sign-in and usage data, IP address, device/browser identifiers and technical logs; your messages to support; and data you connect from third-party services. If you start a free Trial, we also keep a trial-eligibility record (see One Trial per person below). We don't ask for special-category data about you.

2. Why, and our legal basis. To provide the service and manage your subscription (contract); to invoice and keep records (legal obligation); to answer support and send service/security notices (contract / legal obligation); to keep the platform secure and prevent abuse, including making sure each person gets only one free Trial, and spotting unusual sign-up patterns such as many Trials from one network, email domain or referral code, and to measure reliability in aggregate (legitimate interests). We don't sell your data, and we don't use your Content to train models (see Terms §9).

3. Who we share it with (sub-processors). We use the providers listed in the Sub-processor List (in the DPA) to run the service: hosting, payments, messaging, AI model providers and similar. Each processes data on our instructions. We give you at least 30 days' notice of changes and you may object. We disclose data to authorities where the law requires, and to a buyer in a corporate transaction.

4. Where your data is, and transfers. Your Space Content is hosted in the European Union. To generate your Agents' answers, requests go to AI model providers that may be outside the European Economic Area, including, for some media features, a provider in China (Kling). For each provider, the safeguard that applies to the transfer is stated next to it in the Sub-processor List, which is where we keep that information up to date. Where a transfer relies on your explicit consent, we ask for it before the feature runs. If you want to know which safeguard applies to you, write to [email protected].

5. Biometric data. Some optional features (voice cloning, face-based avatars via HeyGen) process biometric data, a special category under Art. 9 GDPR. We process it only with explicit consent and only to provide the feature. Where the biometrics belong to your End User, you're responsible for obtaining that consent.

6. How long we keep it. This is the document where the retention periods are, and the only one to look in for them.

For as long as your account is open. When the free Trial ends, your account stays open and your Content stays where it is, but your Agents stop working, because running an Agent spends Anybot Tokens and the Trial's allowance is finished. They start again as soon as you choose a plan. If you haven't chosen a plan 90 days after the Trial ends, we close the Space and delete its Content; we tell you before that happens and give you time to export your Content. After you close an account yourself, we delete your Content within 30 days; backups are then overwritten on our ordinary cycle. Invoices and accounting records are kept 7 years by law. Our AI model providers may retain inputs briefly for their own abuse-monitoring under their terms; they don't train on them. The trial-eligibility record is kept for 24 months, as described in One Trial per person below.

7. Security. We encrypt data in transit and at rest, limit and log access, keep customers separated, and monitor for anomalies. We don't name specific algorithms or certifications here because they change; the commitment is that protection stays appropriate to the risk. Business Users who need the detail for their own compliance can ask us for it at [email protected].

8. Your rights. You can access, correct, delete, restrict, object to, or port your data, and withdraw consent, by emailing [email protected]; we reply within one month. Erasing your account doesn't remove the trial-eligibility record before the end of its 24-month term; you can object to it as described below. You can also complain to your local supervisory authority. Coming to us first isn't required.

9. Age. ANYBOT isn't for under-16s; you confirm you're 16+ at sign-up. If we learn an account holder is under 16 we close it and refund unused prepaid amounts.

10. Cookies. See the Cookie Policy.

11. Changes & contact. We notify material changes by email and in-product at least 30 days ahead. Contact: [email protected].

One Trial per person (trial-eligibility record). Each person can have one free Trial (Terms §5). To enforce this, when a Trial starts, and whenever a social sign-in is later linked to an account that has had a Trial, we store a keyed one-way fingerprint (an HMAC) of: (a) your email address in a normalised form (lower-case, and for providers that treat them as equivalent, such as Gmail, without dots and without any "+tag"); and (b) the name of each linked sign-in provider (for example Google or Apple) together with your account ID at that provider. With each fingerprint we store the account, Space and subscription it belongs to and when it was created.

  • No readable copy. The record doesn't contain your email address or provider ID in readable form, and the fingerprint can't be turned back into them. We only compare it with the fingerprint of a new Trial request. It is still personal data, which is why the rights below apply to it.
  • Purpose. Checking whether a Trial has already been used, and preventing repeat-Trial abuse. We don't use it for marketing, profiling or anything else.
  • Legal basis. Our legitimate interests in preventing fraud and abuse of a free offer (Art. 6(1)(f) GDPR). No payment method is needed to start a Trial, so this record is the only check we have.
  • How long. 24 months from the day the record was created. We keep it for that time even if you close your account or ask us to erase your data, because deleting it earlier would let the same person take unlimited free Trials. After 24 months it is deleted. Only the fingerprint and the details above are kept.
  • Your rights. You can ask whether we hold a record for you and object to it by emailing [email protected]; we'll weigh your objection against our need to prevent abuse and tell you the outcome. If we refuse a Trial because of a match and you think it's wrong, contact us and a person will review it.

Google Workspace data (Limited Use). AnyBot's access to and use of information received from Google APIs adheres to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including its Limited Use requirements. Information we obtain from Google Workspace APIs, specifically Gmail and Google Calendar, is used solely to provide and improve the user-facing features you explicitly invoke within AnyBot. It is never used, transferred, or sold to develop, train, or improve any generalized or foundational artificial-intelligence or machine-learning model; where a feature uses AI to act on this data, the data is sent only to model providers whose terms prohibit training on it, and when a request is routed through an AI gateway it is configured to deny data collection and retention so that no upstream provider may store or train on it. This information is never used for advertising, and it is not read by any human except with your explicit consent, where necessary for security (such as investigating abuse), or where required by law.