Limited Liability Partnership "BotHub"

240840016499

86/1 Ul Dala Avenue

• USED TERMS AND CONCEPTS
• For the purposes of this Policy, the following terms and concepts have the meanings specified below:"Confidential Information" refers to information (data) about persons, objects, facts, events, and/or processes, regardless of the form in which they are provided, directly or indirectly related to any of the Parties, their affiliates, and/or clients, including: information related to concluded agreements, cooperation, and projects of the Parties; data on the implementation of specific projects; information about the activities of the Party; any information about the methods, technologies, ideas, concepts, tools, components, software products used or developed by the Party; organizational details; accounting policies, plans, procedures for input and storage of accounting data; information about information systems, software, and personnel; and any other data marked as "Confidential", "Trade Secret", "Confidential Information", etc. In this Policy, Confidential Information is any data that becomes known to the Receiving Party from the Disclosing Party.
• The following are not considered Confidential Information:
  • Publicly available data that became public not due to violation of any obligation under this Policy;
  • Information lawfully held by the other Party at the time of acquaintance with this Policy, evidenced by written proof upon request;
  • Data that, according to applicable law, cannot be classified as secret.
• "Disclosing Party" means the Party that owns or holds the Confidential Information and provides it to the Receiving Party for use in accordance with the purpose of its provision.
• "Receiving Party" means the Party that receives Confidential Information or access to such information from the Disclosing Party under the terms of this Policy.
• "Affiliate" (in relation to any Party) means any individual or legal entity (including, but not limited to, subsidiaries, holding companies, and associated companies) that directly or indirectly controls, is controlled by, or is under common control with the Party, where "control" means the ability to make decisions about the controlled entity's actions, whether directly or indirectly, through ownership, contractual rights, or other means.

• TRANSFER AND PROTECTION OF CONFIDENTIAL INFORMATION
• The transfer of Confidential Information is carried out by the Disclosing Party to the Receiving Party through access to business processes, electronic communication, or other agreed methods that ensure confidentiality and confirm the fact of transfer. Such transfer may be documented through acts of transfer or electronic records, or reports of receipt. The Receiving Party may, at its discretion and with reasonable necessity, transfer Confidential Information to its employees, consultants, or experts who need it for the purposes specified in this Policy.
• When transferring Confidential Information, the Receiving Party shall inform its employees, consultants, and experts about the confidential nature of the data and must ensure appropriate protection measures, including limiting access to authorized persons, restricting copying and dissemination, and secure destruction of copies when no longer needed. The Receiving Party is liable for actions or inactions of its personnel and third parties who have access to Confidential Information and for any breaches of confidentiality.
• In case of handling personal data, the Receiving Party shall comply with the requirements of the legislation of the Republic of Kazakhstan on personal data protection, including anonymization when used for testing or demonstration purposes.
• For additional protection, encryption of Confidential Information (texts, files, images, voice messages) may be used. If such encryption is not enabled, confidentiality is not guaranteed by this means.

• RESPONSIBILITY
The Receiving Party is responsible for disclosing Confidential Information and unauthorized use thereof, including actions of its employees and third parties with access to the data. In case of unauthorized disclosure, the Disclosing Party has the right to claim compensation for damages and to initiate criminal or administrative proceedings according to the legislation of the Republic of Kazakhstan, including criminal liability under Article 223 of the Criminal Code of Kazakhstan.

• OTHER CONDITIONS
Obligations regarding confidentiality remain in force during the term of this Policy and for 12 months after its termination. Any disputes arising out of or related to this Policy shall be resolved through negotiations, and if unresolved, in the courts of the Republic of Kazakhstan in accordance with applicable law.

• GOOGLE WORKSPACE USER DATA
• Data to which we request access
Through the OAuth consent screen we may request the following categories of Google Workspace data (the exact set depends on the scopes the user grants):
• Basic Google profile data (name, e-mail address, avatar).
• Gmail message content (read, compose, send and delete e-mails) – only if the corresponding scope is authorized.
• Google Drive file metadata and content – only if the corresponding scope is authorized.
• Google Contacts (name, e-mail address, phone number).
• Google Calendar data (event title, time, description, attendees).
• How we use this data
Bothub uses Google user data solely to deliver the declared functionality of the service:
• Sending, receiving and analyzing e-mails in order to automatically create or log conversations inside chat-bots.
• Importing files from Google Drive that are required to train a specific chat-bot on customer-provided materials.
• Reading and writing Google Calendar events so that the bot can book meetings or send reminders.
• Importing contacts for targeted replies/notifications via the bot.
We do NOT share this data with third parties and do NOT use it for marketing purposes without your explicit consent.
• Retention and deletion
• Data is cached on our servers only for the time needed to complete the user-initiated operation and is automatically deleted no later than 24 hours after that operation ends, unless a longer retention period is strictly required for the feature to function (e.g., prolonged e-mail synchronization).
• Messages or files that the user intentionally saves (for example, while building a training corpus for a bot) are stored until the user deletes them manually or closes the account.
• When an account is deleted, all related copies of the data are removed from our backups within 30 days.
• No use for training general AI/ML models
Data obtained through Google Workspace APIs is NOT used to develop, improve or train general-purpose artificial-intelligence or machine-learning models. All models are trained only on anonymized datasets or datasets provided directly by the customer within the scope of a specific project.
• Compliance with the Google API Services User Data Policy
Bothub adheres to the Limited Use requirements of the Google API Services User Data Policy. Specifically, we:
• Access only the data necessary for the stated feature.
• Use it exclusively to provide and improve the in-app user experience.
• Do not share the data with third parties (except where required by law).
• Allow users to revoke access at any time through their Google Account settings and/or the Bothub control panel.