GDPR
We help you meet your obligations under the EU/UK General Data Protection Regulation (GDPR) when you use VartaBot. This page explains our roles, safeguards, and the tools we provide.
Last updated: July 2026
Controller and processor roles
For your account and workspace data, VartaBot is the data controller. For the conversation and lead data your chatbots collect from your visitors, you are the controller and VartaBot acts as your data processor, processing that data only on your documented instructions.
Legal bases
We process personal data on the lawful bases set out in our Privacy Policy: contract, legitimate interests, consent, and legal obligation. You are responsible for establishing a lawful basis for the data your chatbots collect from visitors and for providing them with the required notices.
Sub-processors
We use a limited set of vetted sub-processors (such as hosting, database, email, and payment providers) under data-protection terms. We maintain a current list and make reasonable efforts to notify customers of material changes so you can raise any objection.
International transfers
Where personal data is transferred outside the EEA/UK, we rely on appropriate safeguards such as Standard Contractual Clauses or transfers to jurisdictions recognised as adequate.
Data subject rights
VartaBot provides tools to access, export, correct, and delete personal data within your workspace, helping you respond to data subject access requests (DSARs) from your visitors. For requests about your own account data, contact privacy@vartabot.in.
Data Processing Agreement
A Data Processing Agreement (DPA) that reflects the GDPR Article 28 requirements is available to customers who need one. Request it at privacy@vartabot.in.
Breach notification
If we become aware of a personal-data breach, we will notify affected controllers without undue delay and support you in meeting your own notification obligations.
Contact
For GDPR questions, DPA requests, or to exercise your rights, email privacy@vartabot.in. You also have the right to complain to your local supervisory authority.
Questions about this document? Email legal@vartabot.in.