Privacy Policy

Your privacy is important to us. It is Boto Internet Applications Company's policy to respect your privacy regarding any information we may collect from you across our website, arabot.io, and other sites we own and operate.

We only ask for personal information when we truly need it to provide a service to you. We collect it by fair and lawful means, with your knowledge and consent. We also let you know why we're collecting it and how it will be used.

We only retain collected information for as long as necessary to provide you with your requested service. What data we store, we'll protect within commercially acceptable means to prevent loss and theft, as well as unauthorised access, disclosure, copying, use or modification.

We don't share any personally identifying information publicly or with third-parties, except when required to by law.

Our website may link to external sites that are not operated by us. Please be aware that we have no control over the content and practices of these sites, and cannot accept responsibility or liability for their respective privacy policies.

You are free to refuse our request for your personal information, with the understanding that we may be unable to provide you with some of your desired services.

Your continued use of our website will be regarded as acceptance of our practices around privacy and personal information. If you have any questions about how we handle user data and personal information, feel free to contact us.

This policy is effective as of 3 March 2019.

Arabot Live Agent – Google User Data Privacy Notice

Effective Date: June 1, 2025

As part of the Arabot Live Agent functionality, our application integrates with Google APIs, specifically Gmail, to enhance support interactions. This section outlines how we handle Google user data in compliance with the Google API Services User Data Policy.

What Google User Data We Access

Arabot Live Agent may access limited user data from Gmail only when users explicitly grant permission through Google OAuth. The data accessed includes:

• Email metadata (sender, recipient, timestamp)
• Email content (subject and message body)
• Labels and threading information (when applicable)

This access is strictly limited to enabling features such as ticket creation, conversation context for support agents, and email-based automation within the Arabot platform.

How We Protect Google User Data

We implement industry-standard security practices to protect user data, including:

• TLS encryption for all data in transit
• Role-based access control for authorized personnel only
• Secure encryption of stored content where applicable
• Periodic access audits and logging

No Google user data is shared with unauthorized third parties or stored beyond its necessary operational use.

Data Retention & Deletion Policy

We retain Gmail data only for as long as necessary to fulfill the purpose for which it was collected:

• Email content used for support/ticket purposes is stored temporarily and deleted after 365 days.
• Users may request data deletion at any time by contacting support at contact@arabot.io.
• All Google user data is deleted immediately upon account disconnection or uninstallation of the app.

AI and ML Policy

Arabot Live Agent does not use any Google Workspace API data to develop, train, or improve generalized AI or machine learning models. All processing is limited to delivering the functionality described in our services and is handled in accordance with Google's Limited Use Policy.

API Scopes Disclosure

The application currently requests the following scope(s) to provide functionality:

• https://mail.google.com — to allow full read/write access as required for support workflows.

We follow the principle of least privilege and review all scopes regularly. If narrower scopes are feasible without impacting functionality, they will be adopted.

Last update June 2025