Privacy Policy
Your privacy matters to us. This Privacy Policy explains what personal data VartaBot collects, why we collect it, how we use and protect it, who we share it with, and the rights and choices you have. We collect only the minimum data needed to run the service.
Last updated: July 2026
Who we are
VartaBot ("VartaBot", "we", "us", "our") provides a no-code, rule-based chatbot platform that businesses use to build chatbots, answer visitors, and capture leads. For account and workspace data we act as the data controller. For the conversation and lead data your chatbots collect from your website visitors, you are the controller and we act as your data processor. Questions about this policy or your data can be sent to privacy@vartabot.in.
Information we collect
Account data you give us (name, work email, password, company name, billing details). Workspace and configuration data (chatbot settings, rules, flows, branding). Conversation and lead data your chatbots capture on your behalf (such as visitor names, emails, phone numbers, and chat messages). Technical and usage data collected automatically (IP address, device and browser type, pages viewed, timestamps, and similar diagnostics). Cookie and similar-technology data as described in our Cookie Policy.
How we use your data
To provide, operate, maintain, and improve the service; to create and secure your account; to process payments and prevent fraud; to provide customer support; to send essential service and account communications; to monitor performance and reliability; and to comply with our legal obligations. We do not sell your personal data, and we do not use the conversation or lead data your chatbots capture for our own marketing.
Legal bases for processing
Where the GDPR or similar laws apply, we rely on: performance of a contract (to deliver the service you signed up for); our legitimate interests (to secure, improve, and support the product) balanced against your rights; your consent (for optional analytics cookies and marketing, which you can withdraw at any time); and compliance with legal obligations (such as tax and accounting requirements).
Sharing and sub-processors
We share data only with trusted sub-processors that help us run VartaBot — for example cloud hosting, database, email delivery, and payment providers — under contracts that require them to protect your data and use it only on our instructions. We may also disclose data if required by law, to enforce our terms, or to protect the rights, safety, and security of our users and the public. A current list of sub-processors is available on request.
International data transfers
VartaBot may process and store data in countries other than your own. Where we transfer personal data across borders, we put appropriate safeguards in place — such as Standard Contractual Clauses or transfers to jurisdictions recognised as providing adequate protection — so your data remains protected to the standard required by applicable law.
Data retention
We keep personal data only for as long as your account is active or as needed to provide the service, then delete or anonymise it. After account deletion, data is removed from our production systems within 30 days, except where we must retain certain records to meet legal, tax, accounting, or security obligations. Conversation and lead data is retained according to the settings and instructions of the customer who controls it.
How we protect your data
We use industry-standard safeguards including encryption in transit (TLS/SSL) and at rest, role-based access controls, least-privilege internal access, monitoring, and regular backups. No method of transmission or storage is completely secure, but we work continuously to protect your information and to respond quickly if an issue arises. See our Security page for more detail.
Your privacy rights
Depending on your location, you may have the right to access, correct, export, restrict, or delete your personal data, to object to certain processing, and to withdraw consent. Many of these actions can be performed directly from your workspace settings; for anything else, contact privacy@vartabot.in and we will respond within the timeframe required by law. You also have the right to lodge a complaint with your local data protection authority.
Cookies and tracking
We use a small number of cookies and similar technologies to keep you signed in, secure the service, and understand how the product is used. Analytics cookies are optional and rely on your consent. You can manage your preferences through your browser at any time. For details, see our Cookie Policy.
Children's privacy
VartaBot is intended for businesses and is not directed to children. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal data, contact us and we will delete it.
Changes to this policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date and, where appropriate, notify you in advance through the product or by email. Your continued use of VartaBot after changes take effect means you accept the updated policy.
Contact us
For any privacy question, request, or concern, email privacy@vartabot.in. We are committed to resolving your concerns and to handling your data responsibly.
Questions about this document? Email legal@vartabot.in.