>>> Privacy Policy <<<
BotGauge Privacy Policy
Last updated: October 28, 2026
01Who we are
This policy explains what personal information BotGauge AI Inc. ("BotGauge", "we", "us") collects, how we use it and the choices you have. We're a Delaware company located at 1111B S Governors Ave # 98032, Dover, DE 19904, USA.
It covers our website, the BotGauge product and any other ways you interact with us, such as emails, events or support.
BotGauge is built for businesses. When your company uses BotGauge to observe and test its AI agents, the data BotGauge handles for your company belongs to your company, and we handle it on your company's behalf. Section 3 explains how. For that data, your company is in charge and we process it on its instructions, under our Data Processing Agreement. If you're a user of an agent someone else observes or tests with BotGauge, please contact that company about your data.
Where BotGauge is offered. BotGauge isn't currently offered in the European Economic Area, the United Kingdom, Switzerland, Brazil, China, South Korea, Russia or Belarus, or in countries under comprehensive US sanctions (Cuba, Iran, North Korea and Syria), and we don't allow sign-ups from these places. Our website is open to visitors everywhere, and this policy applies to them too.
02Information we collect
Information you give us
- Account details: your name, work email, company and role when you sign up. If you sign in with Google, we receive your name, email and profile picture from Google.
- Messages: what you send us when you contact support, book a demo or give feedback.
- Preferences: whether you'd like to receive updates and marketing emails from us.
Information we collect automatically
- Device and connection details: such as your browser, device type, operating system and IP address.
- Your country: we use your IP address to work out the country you're connecting from, using an IP-to-country database that runs on our own servers. Your IP address isn't sent to anyone else for this. We use the country to check that BotGauge is offered where you are, to decide whether we use in-app analytics, and to count sign-ups and usage by country. We keep only the country, never your IP address with it, and we don't work out any more precise location. IP geolocation by DB-IP (db-ip.com).
- How you use BotGauge: for example, the screens and features you use and for how long, the steps you complete (such as connecting an agent, running a test or viewing a report), and when errors happen. This is linked to your account and organisation by internal IDs, never by your name or email, and it never includes the content of your tests, traces, prompts or results. Our analytics provider is set not to keep your IP address, only your country and continent.
- How you found us: when you sign up, the category of site or campaign that brought you (for example, Product Hunt, LinkedIn or a search engine), worked out from the link you followed and the website you came from. We keep only the category, not the full address of that page.
- Cookies and similar tools: see section 6.
Information from others
We may receive business contact details from partners, events we take part in, or publicly available sources such as company websites and professional networks. Some tools on our website also match a visitor's IP address to the company it belongs to, so we can see which companies are interested in BotGauge.
03The data you test with
When you observe or test your AI agents, BotGauge handles things like prompts, responses, conversations, tool activity, test results and reports. This can include personal information if your agent handles it.
This data belongs to your company, and we treat it with extra care:
- We use it only to run BotGauge for you. That means running your tests, showing your results and helping you when you ask for support.
- We share it only with trusted providers: the few we rely on to run the service, such as our cloud hosting and AI model providers. They can only use it to help us deliver BotGauge, and they must keep it confidential. Our AI model providers don't use your data to train their models. We list our providers at botgauge.com/legal/subprocessors, and we give 30 days' notice before adding one.
- We never sell it, and we don't share it with other customers.
- We don't train AI models on it, and we don't use it to build tests or attacks for other customers. If that ever changes, it will be off unless your company turns it on.
Our Terms & Conditions explain your company's responsibilities for this data, including only testing with data it has the right to use.
04How we use your information
We use the information in section 2 to:
- Create and manage your account, and give you access to BotGauge.
- Run, maintain and improve BotGauge, and fix problems.
- Keep BotGauge and our users safe, and prevent misuse or fraud.
- Respond to your questions and support requests.
- Send you service messages, such as account and security notices.
- Send you product updates and marketing, where you've agreed or the law allows. You can unsubscribe at any time.
- Understand how people find and use our website, so we can improve it.
- Understand how people find and use BotGauge, so we can improve it. This is product analytics, and you can opt out at any time (see section 6).
- Measure our advertising, such as which ads lead to sign-ups (see section 6).
- Meet our legal obligations and enforce our terms.
If you're in the EU or UK, we rely on these legal reasons: to provide the service you signed up for; our legitimate interests in running and improving our business, including product analytics, which you can object to by emailing privacy@botgauge.com; your consent, for example for advertising cookies on our website; and to comply with the law. This applies to EU and UK visitors to our website, and to customers using BotGauge while travelling there.
07How long we keep it
We keep information only as long as we need it:
| Information | How long we keep it |
|---|---|
| Account details | While your account is open |
| Test content (traces, prompts, responses, conversations, attack transcripts) | Your plan's retention period, shown in your project settings, then deleted automatically |
| Evaluation results and scores | Up to 365 days |
| Test findings without content (for example, which rule was broken) | While your account is open |
| Security and activity logs | Up to 400 days |
| Usage and analytics information | Up to 12 months |
| Marketing preferences | Until you unsubscribe or ask us to delete them |
If you start signing up but don't finish, the category of how you found us is deleted after 14 days.
You can delete your projects, workspaces or organisation at any time. To delete your personal account, email us at privacy@botgauge.com. Deleted items can be restored for 14 days in case of mistakes, and are permanently deleted within 30 days. Backup copies are overwritten within a further 7 days.
We may keep some information longer when the law requires it, for example invoices and tax records.
08How we protect it
We encrypt your information when it's stored and when it travels over the internet, keep each company's data separate from others, and limit access to our team members who need it to do their jobs.
No system is perfectly secure, so please help us by keeping your password and API keys private.
09Where your information is stored
We store and process your information in the United States, apart from cookie choices on our website, which our cookie consent tool stores in the European Union. This includes our product analytics, which our analytics provider also processes in the United States. If you're outside the US, your information is transferred there. When we transfer information from the EU, UK or Switzerland, we use legally approved safeguards, such as the European Commission's Standard Contractual Clauses and the UK Addendum, as set out in our Data Processing Agreement.
10Your rights and choices
Depending on where you live, you may have the right to:
- See the personal information we hold about you.
- Correct anything that's wrong.
- Delete your information.
- Get a copy of your information to take elsewhere.
- Object to or limit how we use it.
- Withdraw your consent where we rely on it, for example for marketing.
- Opt out of "sharing" for advertising on our website, using the "Do Not Sell or Share My Personal Information" link at the bottom of botgauge.com or your browser's Global Privacy Control.
- Opt out of product analytics by emailing privacy@botgauge.com.
You can update your account details and delete your organisation, workspaces and projects in the product. To delete your personal account, or for anything else, email us at privacy@botgauge.com. When your account is deleted, your analytics data held by our analytics provider is deleted with it. Other usage records are deleted within 12 months. We may need to confirm your identity first, and we'll reply within 30 days. We'll never treat you differently for using these rights. If we turn down your request, you can appeal by replying to our answer. You can also ask someone else to make a request for you.
If you're in the EU or UK and aren't happy with how we've handled your request, you can complain to your local data protection authority.
11Children, changes and contact
Children. BotGauge is for businesses and isn't meant for anyone under 18. We don't knowingly collect information from children. If you think a child has given us information, please contact us and we'll delete it.
Changes to this policy. We may update this policy from time to time. If we make an important change, we'll let you know by email or in the product before it takes effect, and we'll update the date at the top.
Contact us. Questions about your privacy? Email privacy@botgauge.com, or write to BotGauge AI Inc., 1111B S Governors Ave # 98032, Dover, DE 19904, USA.