Privacy Policy

1. Who we are

IsBot is developed, owned and operated by Solid Technology Company Limited (CÔNG TY TNHH SOLID TECHNOLOGY), a company registered in Vietnam, tax ID 4001270447, with its registered address at Thon Tan Ha, Thuong Duc Commune, Da Nang City, Vietnam. Solid Technology is responsible for the personal data processed through IsBot as described in this policy.

You can reach us about privacy at support@solidech.com.

2. Data we collect

2.1 Data you give us

• Account data: your email address, your password (stored only as a salted hash, never in readable form) or, if you sign in with Google, the verified email address and account identifier Google provides.
• Workspace settings: your interface language, timezone, notification preferences and similar settings.
• Chat: the messages you send to IsBot and the replies it gives you.
• Tasks and reminders: the tasks you confirm, their due times and repeat rules, snoozes, completions, and receipts that record when each reminder was delivered.
• Sources and documents: files and text you add so that IsBot can answer from them, and the research feeds you choose.
• Memory: preferences and facts that you approve for IsBot to remember. A suggested memory is stored as a suggestion until you approve or dismiss it.
• Drafts: posts, replies and other text IsBot writes for you, with each revision and your approval decisions.
• Support messages: anything you send us when you contact us.

2.2 Data from services you connect

If you connect Google Calendar, we store the title, start and end time, and all-day flag of your upcoming events, and the email address of each connected Google account so you can tell your accounts apart. We do not store event descriptions, attendee lists or your Google password. Access tokens are held by our integration provider, not in our database.

When you ask IsBot to add, move or delete an event, we store the proposed change, your confirmation and a receipt from Google (the event identifier and link).

2.3 Data collected automatically

• Session data: a session cookie that keeps you signed in, and a short-lived cookie used to complete Google sign-in securely.
• Usage data: counts of tasks, AI requests and other actions, used to enforce usage limits and budgets.
• Security data: your IP address and a bot-check token when you sign up, sign in, reset your password or join the waitlist, used to prevent automated abuse.
• Audit records: a log of important actions in your workspace, such as confirmations, approvals, connections and deletions.
• Technical logs: error and performance records that help us keep the service running. We design these logs not to contain your passwords, secrets or the text of your AI requests.
• [To confirm: whether the website or app uses any analytics or other cookies beyond the cookies above.]

3. How we use your data

We use your data only to provide and improve IsBot for you, specifically to:

• run your personal agent: understand your requests, answer questions and propose tasks, reminders, calendar changes and drafts;
• deliver reminders in the app and, if you turn them on, by email;
• answer from the sources you select and show where each answer came from;
• remember the preferences and facts you have approved, so future work fits you better;
• read and, after your confirmation, change your connected calendar;
• send account emails, such as email verification and password reset;
• enforce usage limits and budgets, and keep the service secure and free of abuse;
• diagnose errors and measure reliability and cost;
• comply with legal obligations.

IsBot only proposes. Nothing becomes a confirmed task, a scheduled reminder, a calendar change, an approved draft or a saved memory until you confirm it.

4. AI processing

To generate a response, IsBot sends the relevant part of your request and context to an AI model provider. This can include your message, recent conversation, the sources you selected, approved memory and the information needed for the task. We only send what the current task needs.

Solid Technology does not train AI models on your content. [To confirm: the model provider's data-use and retention terms, and whether it may use API data for training.]

AI output can be wrong or incomplete. Answers from your documents include citations so you can check them.

5. Sharing and service providers

We share data with the following categories of service providers, each limited to what it needs to perform its function:

5.1 AI model provider

Receives the content described in section 4 to generate responses. [To confirm: provider name and processing location.]

5.2 Email delivery

Receives your email address and the message content when we send account emails or reminder emails you have turned on. Reminder emails go only to your own verified address.

5.3 Google and integration provider

If you connect Google Calendar, access runs through Google and an integration provider that manages the connection and its credentials. Google's own privacy policy applies to your Google account.

5.4 Bot protection

Receives your IP address and a challenge token on sign-up, sign-in, password reset and waitlist forms to tell people from automated abuse.

5.5 Monitoring

We may record technical traces of AI requests (model, timing, token counts and errors) with a monitoring provider. The text of your requests is not included unless content capture is turned on for troubleshooting.

5.6 Hosting

Our servers, database and backups are run by a hosting provider. [To confirm: hosting provider and region.]

5.7 Legal reasons

We may disclose data if required by law or a valid order of a competent authority, or to protect the rights, safety and security of our users, the public or Solid Technology.

We do not sell, rent or share your data for advertising or marketing. A current list of service providers is available on request at support@solidech.com.

6. Storage and security

• Workspace isolation: every workspace is separated at the database level, so one owner's data cannot be read through another owner's account.
• Passwords are stored as salted hashes. Sessions are managed on the server and end when you sign out or delete your workspace.
• Downloads and exports require you to be signed in to your own workspace.
• Credentials for connected services are held by our integration provider, and API keys for our providers are kept on the server only.
• Data in transit is protected with HTTPS. [To confirm: encryption at rest for the database and backups.]

No system is perfectly secure. If you suspect misuse of your account, tell us promptly at support@solidech.com.

7. Retention and deletion

• Chat messages and other raw content are kept for 90 days. [To confirm.]
• Backups are kept for 30 days. [To confirm.]
• Memory you approve is kept until you delete it.
• Imported calendar events are deleted when you disconnect the calendar.
• When you delete a source, IsBot stops using it, and answers and drafts that depend on it are blocked.
• When you delete your workspace, your sessions end and your data is deleted within the periods above.
• Waitlist entries: unconfirmed requests are deleted after 7 days; confirmed entries are kept until you remove yourself.

We may keep limited records longer where the law requires it.

8. Your choices and rights

From Settings you can:

• export your data;
• delete sources and memory;
• turn reminder emails on or off;
• connect or disconnect Google Calendar accounts;
• change your language and timezone;
• delete your workspace.

You can also ask us to access, correct or delete your personal data, to restrict or object to its processing, or to withdraw a consent you gave, by writing to support@solidech.com. We will respond within the time the applicable law requires. [To confirm: response time and verification process.]

9. Children

IsBot is not intended for children. You must be at least [to confirm: minimum age] years old to use it. If you believe a child has given us personal data, contact us and we will delete it.

10. International transfers

Our service providers may process data outside Vietnam. When they do, we take the steps the applicable law requires. [To confirm: transfer locations and safeguards.]

11. Legal compliance

We process personal data in line with Vietnam's personal data protection law. [To confirm: whether we also offer rights under the EU General Data Protection Regulation, the California Consumer Privacy Act or other laws for users in those regions.]

12. Changes to this policy

We will update this policy when IsBot or our practices change, and show the new date at the top. If a change materially affects how we use your data, we will tell you in the app or by email before it takes effect. Each new connection, such as another app, will be described here before we offer it. [To confirm: notice commitments.]

13. Contact

Solid Technology Company Limited, Thon Tan Ha, Thuong Duc Commune, Da Nang City, Vietnam. Email: support@solidech.com.