Privacy Policy

1. Data Collected

We collect different types of data to provide our services:

Data type	Examples	Purpose
Identity	First name, last name, date of birth	Identification, billing, age verification (min. 16 years - GDPR)
Account	Email, username	Account creation and management
Authentication	Password (bcrypt hashed)	Secure login
Connection	IP address, browser, session	Security and abuse prevention
Payment	Transactions, Stripe customer ID	Billing (processed by Stripe)
Usage	Bot logs, performance	Service operation and improvement

2. Data Usage

Your data is used to:

• Provide our services: Bot hosting, dashboard access
• Communication: Important notifications, technical support
• Billing: Payment and invoice processing
• Improvement: Anonymous analysis to improve our services
• Security: Fraud and abuse prevention

We never sell your data to third parties.

3. Data Protection

We implement appropriate technical and organizational measures to protect your data:

• SSL/TLS Encryption: All communications are encrypted
• Password Hashing: Using bcrypt
• Secure Servers: Infrastructure hosted in Europe (GDPR)
• Restricted Access: Only authorized personnel can access data
• Encrypted Backups: Protection against data loss

4. Data Retention

We apply the principle of minimization and retain your data for the following periods:

• Account data: Until account deletion
• Bot files: 30 days after suspension for non-payment, then permanently deleted
• Billing data: 10 years (legal accounting obligation, art. L123-22 of the French Commercial Code)
• Technical logs: 12 months maximum
• Support data: 3 years after the last interaction

In case of non-payment, the service is maintained for 7 days (grace period), then suspended. Files are kept for an additional 30 days before permanent deletion. A warning email is sent 5 days before deletion.

5. Your Rights (GDPR)

In accordance with the General Data Protection Regulation (GDPR), you have the following rights:

• Right of access: Obtain a copy of your data
• Right to rectification: Correct inaccurate data
• Right to erasure: Request deletion of your data
• Right to portability: Receive your data in a standard format
• Right to object: Object to the processing of your data
• Right to restriction: Restrict the processing of your data

To exercise these rights, contact us at privacy@bothost.fr

6. Cookies

We use cookies for:

• Essential cookies: Login, security, preferences
• Analytics cookies: Anonymous statistics (with consent)

You can manage your cookie preferences at any time via your browser settings.

7. Subprocessors and Data Sharing

Your data may be shared with the following subprocessors, all GDPR compliant:

• Stripe, Inc.: Secure payment processing — PCI DSS Level 1 certified, Stripe DPA accepted in accordance with art. 28 GDPR. Stripe directly collects the cardholder name and billing address in its hosted form; this data is not stored by BotHost.
• Hetzner Online GmbH: Technical infrastructure — servers located in Germany (EU), GDPR compliant
• Judicial authorities: On legal request only

No data transfer outside the European Union is performed. All data is hosted on servers located in Germany.

Legal basis for processing (art. 6 GDPR)

• Email, username: Contract performance (art. 6.1.b)
• Payment data: Contract performance + legal billing obligation (art. 6.1.b/c)
• IP address, logs: Legitimate interest — service security (art. 6.1.f)
• Marketing emails: Explicit opt-in consent (art. 6.1.a)

8. Minors

Our services are intended for persons aged 16 and over. If you are a parent and discover that your child has provided us with data, contact us to have it deleted.

9. Changes

We may update this privacy policy. Significant changes will be notified to you by email or via a notification on our website.

10. Contact

For any questions regarding this policy or your data:

• Email: privacy@bothost.fr
• Form: Contact page

You also have the right to file a complaint with the CNIL (French National Commission for Information Technology and Liberties).