Privacy Policy

Last updated: 13 July 2026

BotBooster is a WhatsApp-based AI assistant platform that helps small and medium businesses automate customer communication, answer questions, manage bookings, capture leads and connect selected business tools such as Google Calendar and Google Sheets.

By using BotBooster, you agree to the practices described in this Privacy Policy.

1. Who this policy applies to

This Privacy Policy applies to:

• business customers who sign up for or use BotBooster;
• people who communicate with a business through a BotBooster-powered WhatsApp assistant;
• users who manage or train a BotBooster assistant;
• visitors to the BotBooster website;
• users who connect third-party integrations, including Google Calendar and Google Sheets.

In this policy, “BotBooster”, “we”, “us” and “our” refer to BotBooster.

2. Information we collect

We collect information needed to provide, operate, secure and improve BotBooster. Data received from Google APIs is subject to stricter limitations and is used only to provide, secure, maintain and support the specific user-facing Google integration functionality requested and authorised by the business customer, as detailed in Section 4.

2.1 Account and business information

When a business signs up for BotBooster, we may collect:

• business name;
• contact person name;
• email address;
• WhatsApp number or phone number;
• billing or subscription information;
• business address, service area or location;
• business website;
• business opening hours;
• business description;
• services, prices, FAQs and other business information provided to train the assistant;
• selected subscription tier;
• setup, onboarding and configuration information.

2.2 WhatsApp and conversation information

When users communicate with a BotBooster-powered WhatsApp assistant, we may collect and process:

• WhatsApp phone number;
• WhatsApp display name, where available;
• messages sent to and from the assistant;
• customer enquiries;
• booking requests;
• lead details;
• callback requests;
• complaints, urgent requests or support messages;
• conversation labels and status information;
• timestamps and message delivery information;
• attachments or files sent through WhatsApp, where supported.

2.3 Customer information submitted through conversations

Depending on how a business configures BotBooster, the assistant may collect information from customers such as:

• name;
• phone number;
• email address;
• appointment details;
• enquiry details;
• service preferences;
• lead information;
• survey or intake form answers;
• information needed to respond to a question, complete a booking or support a business workflow.

Businesses are responsible for ensuring that they have a lawful basis to collect and use information from their own customers through BotBooster.

2.4 Integration information

If a business customer enables integrations, BotBooster may process information from connected third-party services to provide the requested functionality.

This may include information from:

• Google Calendar;
• Google Sheets;
• other calendar, CRM, document, analytics, workflow, storage or business systems selected by the customer.

If a business customer enables Google integrations, BotBooster may process Google Calendar and Google Sheets data needed to provide the enabled functionality. This may include calendar identifiers, calendar availability, event details, spreadsheet identifiers, sheet names, column headings, row and cell values, Google account identifiers, OAuth access tokens, refresh tokens and integration settings.

2.5 Technical and usage information

We may collect technical information such as:

• IP address;
• browser type;
• device information;
• operating system;
• pages visited;
• referring URLs;
• timestamps;
• system logs;
• error logs;
• security logs;
• usage analytics;
• integration status and diagnostic information.

2.6 Payment information

Where payments are required, payment information may be processed by our payment service providers. We do not intentionally store full card numbers or full payment card details on BotBooster systems unless expressly stated and required for a specific payment process.

3. How we use information

We use personal information, business information, conversation information and technical information to provide, operate, secure, support and improve BotBooster.

Google user data is subject to the additional restrictions in Section 4. Google user data is used only to provide, secure, maintain and support the specific Google integration functionality requested and authorised by the business customer. Unlike general account data, Google user data is never used for general product development or untargeted platform improvement analytics.

This includes:

• setting up and managing BotBooster accounts;
• operating WhatsApp assistants for business customers;
• answering customer questions through the assistant;
• training and updating assistant responses;
• managing FAQs, business profiles, services and prices;
• handling booking, rescheduling and cancellation requests;
• capturing leads and enquiries;
• sending alerts to business users when attention is needed;
• providing access to inboxes, labels, dashboards or analytics;
• connecting and operating integrations selected by the business customer;
• saving or retrieving information from Google Sheets where configured;
• creating, updating or reading Google Calendar bookings where configured;
• troubleshooting technical issues;
• preventing fraud, abuse, security incidents and unauthorised access;
• providing customer support;
• processing billing and subscriptions;
• complying with legal and regulatory obligations.

We do not use Google user data for advertising, marketing, resale, surveillance, unrelated profiling, general product development or any purpose unrelated to the specific Google integration functionality requested and authorised by the business customer.

4. Google User Data

Where a business customer chooses to connect Google integrations to BotBooster, BotBooster may access and process limited Google user data only for the purpose of providing the BotBooster service requested by that business customer.

4.1 Google user data we collect or access

Depending on which Google integration is enabled, BotBooster may access or process the following Google user data:

Google Calendar

• calendar identifiers;
• calendar availability;
• appointment and event details needed to create, reschedule or cancel bookings;
• event titles, dates, times, descriptions, locations and attendee details where required for booking functionality;
• Google account identifiers required to connect and maintain the integration.

Google Sheets

• spreadsheet identifiers;
• sheet names and column headings;
• rows and cell values required for the business customer’s configured workflow;
• data submitted through WhatsApp that the business customer has chosen to save to Google Sheets;
• data retrieved from Google Sheets where the business customer has configured BotBooster to use a sheet for lookup, access control, lead capture, surveys, intake forms or similar business functionality.

Google OAuth connection data

• access tokens;
• refresh tokens;
• token expiry information;
• related account identifiers required to maintain the Google integration;
• integration settings selected by the business customer.

BotBooster does not request access to Google user data unless the business customer enables a Google integration and authorises access through Google OAuth.

4.2 How we use Google user data

BotBooster uses Google user data only to provide, secure, maintain and support the specific application functionality requested and authorised by the business customer, including:

• checking availability and managing bookings through Google Calendar;
• creating, rescheduling and cancelling calendar events;
• saving leads, enquiries, survey answers, intake information or other WhatsApp-submitted information to Google Sheets;
• reading Google Sheets data where configured by the business customer, for example to look up approved numbers, retrieve business information or support a configured automation;
• maintaining the authorised Google connection;
• troubleshooting integration errors;
• protecting the integration against fraud, abuse, security incidents and unauthorised access; and
• providing technical support for the authorised integration.

BotBooster does not use Google user data for advertising, marketing, unrelated profiling, selling or reselling data, general product development, or any purpose unrelated to the specific user-facing functionality requested and authorised by the business customer.

BotBooster does not use Google user data to develop, train or improve generalised, foundational, frontier or non-personalised artificial intelligence or machine-learning models.

4.3 Sharing or disclosure of Google user data

BotBooster does not sell Google user data.

BotBooster does not transfer Google user data to third parties for advertising, marketing, resale, surveillance, unrelated profiling, general product development or artificial intelligence or machine-learning model training.

Google user data may be shared only where necessary to provide, secure or support the BotBooster service, including with:

• the business customer that connected the Google integration;
• hosting, infrastructure, database and security service providers used to operate BotBooster;
• automation, AI or workflow service providers used to deliver the requested BotBooster functionality;
• professional advisers, regulators, courts or authorities where required by law.

Where BotBooster uses service providers, they are permitted to process Google user data only as needed to provide services to BotBooster and not for their own independent purposes.

4.4 Protection of Google user data

BotBooster uses technical and organisational safeguards designed to protect Google user data against unauthorised access, disclosure, alteration or loss. These safeguards may include:

• HTTPS/TLS for data transmission;
• access controls and authentication controls;
• restricted access to Google OAuth tokens and integration settings;
• secure storage of credentials and tokens;
• environment and credential separation;
• logging and monitoring;
• backup and recovery controls;
• limiting access to authorised personnel who need access to operate or support the service.

4.5 Retention and deletion of Google user data

BotBooster keeps Google user data only for as long as reasonably necessary to provide the connected Google integration, operate the BotBooster service, comply with legal obligations, resolve disputes, prevent abuse, or maintain security.

A business customer may request deletion of Google integration data by contacting BotBooster at:

• Email: info@botbooster.co.za

If a business customer disconnects a Google integration or requests deletion, BotBooster will take reasonable steps to delete or de-identify Google user data that is no longer required, unless retention is required or permitted by law, security, fraud prevention, backup, audit or dispute-resolution obligations.

Google OAuth tokens are deleted or disabled when they are no longer required to provide the integration, when the integration is disconnected, or when deletion is requested and can lawfully be performed.

4.6 Limited Use of Google user data

The use and transfer of raw or derived user data received from Google Workspace APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In particular, BotBooster:

• uses Google user data only to provide, secure, maintain and support the specific user-facing functionality requested and authorised by the business customer;
• does not transfer or sell Google user data for advertising, marketing, credit assessment, data brokerage or other unrelated purposes;
• does not use Google user data to develop, train or improve generalised, foundational, frontier or non-personalised artificial intelligence or machine-learning models;
• does not permit service providers to use Google user data for their own advertising, profiling, product development or model training; and
• does not allow humans to read Google user data unless the user has provided consent to access specific data, access is necessary for security purposes such as investigating abuse, disclosure is required by applicable law, or the data has been aggregated and anonymised for permitted internal operations.

Any transfer of Google user data to a service provider is limited to what is necessary to provide or support the specific user-facing functionality requested by the business customer.

5. WhatsApp and Meta services

BotBooster operates through WhatsApp and may use Meta services to send, receive and manage WhatsApp messages.

When a person communicates with a BotBooster-powered assistant through WhatsApp, information may also be processed by WhatsApp, Meta or related service providers according to their own terms and privacy policies.

BotBooster does not control WhatsApp’s or Meta’s independent processing of information.

6. AI processing

BotBooster uses artificial intelligence and automation to help businesses respond to messages, answer questions, classify conversations, assist with bookings and perform configured workflows.

Information submitted to BotBooster may be processed by AI systems or AI service providers for the purpose of providing the BotBooster service.

BotBooster does not use Google Workspace user data (including Google Calendar and Google Sheets data) to develop, improve or train generalised or non-personalised AI or machine learning models. Google user data is processed by AI systems only to deliver the specific BotBooster functionality requested by the business customer, and is not used for unrelated advertising, resale, profiling or model training.

Businesses should not submit unnecessary sensitive information into BotBooster unless it is required for their business workflow and they have a lawful basis to process that information.

7. How we share information

We may share information only where necessary to provide, operate, secure, support or improve BotBooster, or where required by law. Data received from Google APIs is never shared for general platform improvement and is only transferred to third parties under the strict, limited exceptions detailed in Section 4.3.

This may include sharing information with:

• the business customer that uses BotBooster;
• authorised users or team members added by the business customer;
• hosting and infrastructure providers;
• database and storage providers;
• WhatsApp, Meta or messaging service providers;
• AI, automation or workflow service providers;
• analytics, monitoring, logging and security providers;
• payment processors;
• customer support providers;
• professional advisers;
• courts, regulators, law enforcement or other authorities where required by law.

We do not sell personal information.

We do not sell Google user data.

We do not share Google user data for advertising or unrelated purposes.

8. Data protection and security

We use reasonable technical and organisational measures to protect information against unauthorised access, loss, misuse, alteration or disclosure.

These measures may include:

• HTTPS/TLS encryption for data in transit;
• access controls;
• authentication controls;
• restricted administrative access;
• secure credential and token storage;
• server, database and application security controls;
• logging and monitoring;
• backup and recovery processes;
• separation of environments where appropriate;
• internal policies and procedures;
• limiting access to personnel and service providers who need access to provide the service.

No system can be guaranteed to be completely secure. However, we take reasonable steps to protect information and respond to suspected security incidents.

9. Data retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy.

Retention periods may depend on:

• the type of information;
• the business customer’s subscription status;
• the purpose for which the information was collected;
• legal, tax, accounting or regulatory requirements;
• fraud prevention, security, backup, audit or dispute-resolution requirements;
• whether deletion has been requested.

Google user data and Google OAuth tokens are retained only for as long as needed to provide the connected Google integration, unless a longer period is required or permitted by law, security, backup, audit, fraud-prevention or dispute-resolution obligations.

When information is no longer required, we will take reasonable steps to delete, de-identify or securely retain it according to applicable requirements.

10. Deletion requests

Business customers may request deletion of their BotBooster account data, integration data or Google user data by contacting:

• Email: info@botbooster.co.za

Where a business customer requests deletion, we will take reasonable steps to delete or de-identify information that is no longer required, unless we are required or permitted to retain it for legal, security, fraud prevention, backup, audit, operational or dispute-resolution purposes.

People who communicate with a BotBooster-powered assistant should contact the relevant business directly if they want to exercise privacy rights relating to that business’s customer records. Where appropriate, BotBooster will support business customers in responding to lawful deletion or access requests.

11. Business customer responsibility

BotBooster provides tools that businesses use to communicate with their own customers.

Business customers are responsible for:

• ensuring they have a lawful basis to collect and process their customers’ personal information;
• providing any privacy notices required for their own customers;
• ensuring the information they upload, connect or submit to BotBooster is lawful and appropriate;
• controlling which team members can access their BotBooster account;
• ensuring their Google Calendar, Google Sheets and other integrations are configured appropriately;
• responding to privacy requests from their own customers where they are the responsible party.

12. International processing

Information may be processed or stored in countries other than the country where the user or business is located.

Where information is transferred internationally, we take reasonable steps to ensure that appropriate safeguards are in place and that information is processed according to this Privacy Policy and applicable law.

13. Cookies and website analytics

The BotBooster website may use cookies or similar technologies to operate the website, improve performance, understand usage and support marketing or analytics.

Users may be able to disable cookies through their browser settings. Some website features may not work properly if cookies are disabled.

14. Children’s privacy

BotBooster is intended for use by businesses and their customers. It is not intended for use by children as a standalone consumer service.

Businesses using BotBooster are responsible for ensuring that they comply with applicable laws when collecting information from minors or vulnerable persons through their own customer communication channels.

15. Legal basis for processing

Depending on the context and applicable law, we may process personal information on one or more of the following grounds:

• to perform a contract with a business customer;
• to provide the BotBooster service;
• with consent, where required;
• for legitimate business interests, such as operating, securing and improving BotBooster;
• to comply with legal obligations;
• to prevent fraud, abuse or security incidents.

16. Your rights

Depending on applicable law, users may have rights to:

• access personal information;
• correct inaccurate information;
• request deletion of information;
• object to certain processing;
• restrict certain processing;
• withdraw consent where processing is based on consent;
• request information about how data is used or shared.

Requests may be sent to:

• Email: info@botbooster.co.za

We may need to verify your identity before responding to a request.

If your request relates to a business that uses BotBooster to communicate with you, we may direct your request to that business or assist the business in responding, depending on the circumstances.

17. Changes to this Privacy Policy

We may update this Privacy Policy from time to time.

When we make material changes, we may update the “Last updated” date at the top of this page and may notify users where required.

Continued use of BotBooster after changes are published means that the updated Privacy Policy applies.

18. Contact us

For privacy questions, data requests, Google user data deletion requests or other privacy-related matters, contact us at:

• Email: info@botbooster.co.za
• Website: https://botbooster.co.za
• Privacy Policy URL: https://botbooster.co.za/privacy.html