Privacy policy
An assistant that knows your day has to be one you can trust. So here, without detours, is what we process, why, for how long, and how you keep it in your own hands.
Who we are
Personal Bot is built and run by Stear Products, based in the Netherlands (chamber of commerce and VAT numbers follow on incorporation). Privacy questions: privacy@personalbot.nl.
What we process
Your account
- Your e-mail address, the name you give your assistant, your language and time zone.
- Payment details live at Stripe. We never see your card; we only learn that a payment was made, which plan, and a customer number.
- The key of your own Telegram bot, stored encrypted. Only your Telegram account may talk to that bot.
What you say to your assistant
- Your messages and the replies, to hold the conversations and to extract the notes you want to find again later.
- Notes: facts, appointments, lists, goals and reminders the assistant keeps. Every note sits on your own page with its date and source; you can delete each one.
- Photos, PDFs and links you send, kept until you throw them away.
What you connect (only if you do)
- Calendar. Events from the calendars you connect, to tell you about your day and, after your approval, to book something.
- Mail. Sender, subject, date and a short preview of messages, to work out who is waiting on you and which deadlines are coming. The full text of a message is read only when one task needs it and is not kept. The connection cannot send.
- Other integrations (Todoist, Notion, Jira, for example): only what the integration says it reads on your page, and only after you switch it on.
Technical
- System logs (errors, which integration was used when) without the content of your messages; IP addresses briefly, to keep abuse out.
- A record of everything the assistant wanted to do towards others and what you approved or rejected. That record cannot be edited, not by us either.
Why, and on what basis
- To provide the service (performance of the contract): your account, conversations, notes, briefings.
- With your consent: every connection to a calendar, mailbox or other service. You withdraw it by switching the integration off or disconnecting it; the access tokens are then revoked and the data from that source deleted.
- Legitimate interest: security, abuse prevention and measuring cost per account. Never profiling for advertising.
Where it lives and who can reach it
Your data is stored encrypted on a server in Germany (Hetzner). To answer, your assistant sends the relevant part of a conversation to Anthropic's language model under a data processing agreement that rules out training on your data. To search your notes, short text fragments go to Voyage AI under the same condition. Both processors are in the United States; the transfer is covered by the EU standard contractual clauses.
At Stear Products only the operator can reach the systems, only for maintenance and support, and every access is logged. Nobody reads your conversations for fun.
Processors
| Who | For what | Where |
|---|---|---|
| Hetzner Online | Hosting and storage | Germany (EU) |
| Anthropic | The language model that answers; no training on your data | United States |
| Voyage AI | Search index over your notes (embeddings); no training | United States |
| Telegram | Transport of your messages | Worldwide |
| Stripe | Payments and invoices | Ireland / United States |
| Resend | Sign-in links and the welcome mail | United States |
| Microsoft, Google, Todoist, Notion, Atlassian | Only the service you connect yourself | Under their own terms |
For how long
- As long as your account exists: your notes and conversations, until you delete them.
- Temporary working cache of integrations: 24 hours at most.
- After cancellation: 30 days read-only so you can export everything. Then everything is deleted: notes, conversations, files, connections, the bot key. Only a record of the deletion is kept for a year.
- System logs: 90 days. Backups: 30 days, encrypted.
Your rights
For most things you need not mail us: your own page shows what the assistant knows, and you delete notes, connections or the whole account yourself. Export comes as one file. To have something corrected, to object, or simply to ask what there is: mail privacy@personalbot.nl; we answer within a month, usually much faster. You can always complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
Website statistics
This website runs Umami, an analytics tool on our own server. It counts visits anonymously: no cookies, no profiles, no data shared with third parties. We see how many people view a page and roughly where they come from — never who they are.
Age
Personal Bot is for people aged 16 and over.
Changes
If something material changes, we mail you at least 30 days ahead. The date at the top says which version applies.