Privacy policy
Last updated: 2026-10-30
How JMB Bot handles the data of the businesses it serves, their customers, and the visitors of their websites. In this policy, “you” is the business that uses the assistant. If you are a customer or a website visitor, go to “Your choices”.
Who we are
JMB Bot provides the service (“we”). Our technology provider runs it for us.
What we collect
- Your account: your email, your business name, your password (stored only in a scrambled form that can't be read back), and your language.
- Your customers' conversations, on WhatsApp and on your website: their messages, their name and number, and the photos, PDF files, and voice notes they send. A file is read to write the answer; the assistant keeps only a short description of it, not the file itself.
- What your assistant collects for you: the details your template asks for, with the customer's country (first from their phone number), city, age group, and gender when the conversation gives them; a summary of each conversation, written to leave out names and phone numbers; appointments; leads; and, on the website chat, the phone number or email a visitor chooses to leave.
- For clinics: the main complaint and the health details a customer chooses to share. These are sensitive personal data. They are kept only in your account, used in your reports with names and phone numbers left out, and go only where “Who receives it” below says. When the person concerned is known to be under 18, their health details and medical history are not stored with their details, and the summary is written to leave them out: of their health, only the reason for the visit is kept.
- Your assistant may keep short private notes about what helped or hurt a conversation, written to leave out names, phone numbers, and health details. They are read by our technology provider's team, with phone numbers, emails, and the names the assistant knows removed, to improve the templates. They are deleted with the conversation.
- Your analyses: when you choose “Analyse”, the AI service receives the summaries, notes, collected details (without names or phone numbers), and figures of the last 30 days, and writes a report kept in your account with its date.
- Website visitors: what they write or send in the chat, the phone number or email and the name they leave in the form, and a random code kept in their browser so the chat continues on their next visit. On a WooCommerce shop, the contents of the cart are sent with a message: used for that answer, never stored.
- Cookies: they keep you signed in (30 days), remember your language (1 year), and bring you back to our sign-in page (1 year).
- Technical logs: used to fix errors and protect the service, kept 30 days. Detailed logs, switched on only to solve a problem, are kept 7 days.
- Campaigns, when your plan includes them: the lists you upload or paste (each person's number, name, city, and the other columns of your file), and which campaign was sent to whom, whether it was delivered or read, and whether the person replied within 7 days. No AI reads the lists.
- People who asked not to be messaged: their number, the date, and how they asked, so they never get a campaign again. Each person gets at most one campaign every 7 days.
- The setup assistant's chat: what you and the assistant wrote to each other, the “Saved” notes under its answers, and what it needs to undo its latest changes. It is kept in your account so the chat continues where you stopped, and only its most recent messages are kept. It holds no customer's messages, and no file or website page you gave it.
- A short private note that the setup assistant writes about how the setup chat went (where it was unclear, refused, or went smoothly), and counts of setup events (a key refused, a link that failed, a website read). Phone numbers, emails, web addresses, and the business's name are removed from the note. They are linked to your account only so they can be deleted with it. Our technology provider's team reads them without the account's name, to improve the setup. They are never shown to the business, sent to anyone, or used for your bot's answers.
Why we use it
To answer your customers, book their appointments, collect leads, tell your team, show your reports, and send the campaigns you start.
Your data is never sold and never used for advertising.
How long we keep it
- Conversations, leads, appointments, and analyses: until you delete them, or until we delete your account.
- Copies of incoming messages, kept so that each one gets answered: 30 days.
- Logs: 30 days. Detailed logs: 7 days.
- A deleted conversation can remain in a backup copy until that copy is deleted.
- Campaign lists, messages, and campaigns: until you remove them or erase all data. Who received each campaign: until you erase the conversations. The list of people who asked not to be messaged stays even after an erase, so they are never messaged again.
- The setup assistant's chat: until you choose “Erase all data” on the Account page, or until we delete your account. Erasing only the conversations keeps it.
- The setup assistant's private notes and the counts of setup events: up to 180 days, or until you choose “Erase all data” on the Account page, or until we delete your account. Erasing only the conversations keeps them.
Your choices
You can delete a conversation on its page, and erase all conversations or all customer data on your Account page.
A customer or a visitor with a request about their data asks the business they wrote to, or that messaged them. Someone who got a campaign and wants no more can reply asking to stop, or tell the business. For anything else, and for your customers' requests, contact us.
Security
Each business's data is kept apart from every other business's. The connection to the service is encrypted (HTTPS). Stored AI keys and WhatsApp tokens are encrypted.
Changes
This policy can change. The date at the top of this page shows the last change.
Contact
For any question about your data, contact JMB Bot.