The short version
- Your conversations belong to you. We don't sell data, ever.
- There is no advertising on My AI Chatbot, so there's no ad tracking.
- Chat messages are sent to the AI provider you pick for each bot — that's how the bot answers. We send only what's needed for the reply.
- Our core infrastructure is hosted in Singapore; a few specialised providers (payments, email, AI) run elsewhere.
- You can export or delete your data whenever you like. We extend GDPR-style rights to everyone, not just people in Europe.
Who we are
My AI Chatbot is a product of D-EFFCON Pty Ltd, an Australian private corporation (that's the one formal mention — we'll just say "we" from here). For anything privacy-related, email privacy@my-aichatbot.com.
This policy covers the My AI Chatbot app (app.my-aichatbot.com), public bot pages (chat.my-aichatbot.com), and this website (my-aichatbot.com).
What we collect
Things you give us
- Account details — your email address, display name and password (stored only as a secure hash — we can't read it).
- Your content — bots and their instructions, chat messages, uploaded files and images, dashboard widgets and settings.
- Workspace info — who you invite and their roles.
Things that happen as you use the app
- Usage counters — how many messages, how much storage and bandwidth your workspace has used. We need these to run fair limits.
- Gamification history — XP events, levels and items, so your character stays yours.
- Technical logs — requests, errors and timestamps (including IP addresses), kept briefly for security and debugging. For abuse-prevention counters we store a one-way hashed form of your IP, not the raw address.
Things we deliberately don't collect
- Card numbers — payments run through Stripe; card details go straight to them and never touch our servers.
- Advertising identifiers — there are none, because there are no ads.
How AI replies work (the important bit)
When you — or a visitor on one of your bot pages — send a message, the conversation content needed for the reply (including any attached files) is sent to the AI provider whose "brain" that bot uses: Anthropic (Claude), OpenAI (GPT) or Google (Gemini). That's the whole trick; it's how the bot talks back.
We use these companies' developer APIs, not their consumer apps — your chats don't show up in anyone's ChatGPT history. Providers may retain API content briefly for abuse and safety monitoring under their own terms. We don't send them your email address or billing details with your messages.
Where your data lives
Our database, authentication, file storage and caching are hosted in Singapore (Supabase and Upstash), and the app's server functions run in Singapore too. This website is served from Cloudflare's global network. Some specialised providers below process data in the United States or elsewhere; where GDPR applies, those transfers rely on recognised safeguards such as Standard Contractual Clauses.
Who helps us run this (subprocessors)
| Provider | What for | Where |
|---|---|---|
| Supabase | Database, sign-in, file storage | Singapore |
| Upstash | Caching and background queues | Singapore |
| Vercel | App hosting (functions pinned to Singapore) | Singapore / global CDN |
| Cloudflare | This website | Global network |
| Anthropic, OpenAI, Google | AI replies (the bot brains you choose) | United States |
| Stripe | Payments and billing | United States |
| Postmark | Transactional email (invites, receipts, resets) | United States |
| Sentry | Error monitoring | United States |
| hCaptcha | Stopping bots at sign-up and sign-in | Global |
How long we keep things
- Account data — for as long as your account exists.
- Chat messages — per your workspace's chat retention window, then removed automatically.
- Files — until you delete them or your account closes.
- Deleted accounts — content is purged promptly and leaves encrypted backups as they age out (roughly 30 days).
- Technical logs — short-lived, typically days to a few weeks.
Your rights
Wherever you live, you can ask us to: access what we hold about you, export it in a portable format, correct it, delete it, or restrict how it's used. Email privacy@my-aichatbot.com and we'll sort it out — usually well inside the 30 days the law allows.
If you're in Australia, you can complain to the OAIC (oaic.gov.au); in the EU/UK, to your local data protection authority. We'd appreciate the chance to fix things first.
Children
My AI Chatbot isn't directed at children setting up accounts on their own. Kids should use it inside a parent or guardian's workspace, under your rules — that's what family workspaces and bot passwords are for. If you believe a child under 16 holds their own account, email us and we'll remove it.
Cookies
The handful we use are strictly necessary — see the cookie policy for the full (short) list.
Changes
If we change this policy in a way that matters, we'll tell you in the app or by email before it takes effect — not by quietly editing a page and hoping you don't notice.
Contact
Privacy questions, rights requests, or a gut feeling something's off: privacy@my-aichatbot.com.