Privacy Policy

Last updated: 10 July 2026

This Privacy Policy explains what information BotWitness LLC ("we", "us") collects, how we use it, and the choices you have. It covers our website, dashboard, and API.

1. Information we collect

• Account information. The email address you use to create an account, a hashed password, and a record of the plan you purchased.
• Payment information. When you pay, your card details are collected and processed directly by Stripe, our payment processor. We never see or store your full card number. We retain a Stripe customer reference, the last four digits and brand of your card for display, and your billing history.
• Usage information. Basic technical logs (such as request times, IP address for rate-limiting and abuse prevention, and the API endpoints you call) needed to operate and secure the Service.

2. What the archive is not

The records BotWitness produces are captured from public, non-personal sources, files like robots.txt that websites publish for automated agents. The archive is about how public sources treat crawlers; it is not built from your personal data, and using the Service does not add your personal information to the archive.

3. How we use information

• To provide the Service: create your account, issue and meter API keys, generate certificates, and deliver alerts.
• To process payments, prevent fraud, and manage subscriptions (via Stripe).
• To secure and maintain the Service, including rate-limiting and diagnosing problems.
• To communicate with you about your account, receipts, and material changes to the Service or these policies.

We do not sell your personal information, and we do not use it for advertising.

4. Service providers we rely on

• Stripe: payment processing and billing.
• Railway: application hosting.
• Cloudflare: content delivery and network security.
• Cloudflare R2: encrypted cold storage for evidence artifacts.

These providers process data on our behalf under their own security and privacy terms, only as needed to deliver their part of the Service.

5. Cookies

We use a single, strictly necessary session cookie to keep you logged in to your dashboard. We do not use advertising or third-party tracking cookies.

6. Data retention

We keep account and billing information for as long as your account is active and as required to meet legal, tax, and accounting obligations. Operational logs are retained for a limited period for security and troubleshooting. You can ask us to delete your account; see below.

7. Your rights

Depending on where you live (including under the EU/UK GDPR and the California CCPA), you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing. To exercise these rights, email [email protected] from the address on your account and we will respond within the timeframe required by applicable law. Because the BotWitness archive contains only public, non-personal source data, these requests concern your account and billing information.

8. International transfers

We and our providers may process information in the United States and other countries. Where required, we rely on appropriate safeguards for such transfers.

9. Changes to this policy

We may update this Privacy Policy from time to time. We will update the date above and, for material changes, take reasonable steps to notify you.

10. Contact

Questions or privacy requests? Email [email protected].