Ovebot Privacy Policy

How Aweb Design SRL handles personal data of its B2B customers and processor relationships.

Who we are

Aweb Design SRL is the operator of the Ovebot AI customer-support platform. You can reach us at https://account.ovebot.ai.

Our role under the GDPR

Data we collect

For our direct relationship with you (the tenant) we collect:

Account data — name, email, hashed password, language preference.
Billing data — company name, VAT ID, address, payment metadata returned by Stripe.
Operational logs — login events, IP address, user-agent, audit trails.
Aggregate usage metrics — API calls, message counts, token totals.

Why we collect it

Provide and operate the Ovebot platform.
Process payments and issue invoices.
Detect abuse, debug incidents, and maintain platform security.
Comply with legal obligations (accounting, tax, regulatory).

Legal basis

We process your data under Art. 6(1)(b) (performance of the contract you signed up for) and Art. 6(1)(f) (legitimate interest in running the platform securely). Marketing communications, when applicable, are sent with your explicit consent (Art. 6(1)(a)).

How long we keep it

Account data: kept while your account is active. After deletion, soft-deleted for 30 days then permanently removed.
Billing records: kept for 10 years to satisfy accounting law.
IP addresses in logs: anonymized after 90 days.

Third parties involved

We rely on a small number of vetted third parties to deliver the service. See the full list at https://account.ovebot.ai/legal/sub-processors.

International transfers

Some sub-processors (notably the LLM providers) are based in the United States. Transfers happen under the EU-US Data Privacy Framework or Standard Contractual Clauses approved by the European Commission.

Your rights

Right to access
Right to rectification
Right to erasure (be forgotten)
Right to object
Right to lodge a complaint with a supervisory authority

Contact

Questions about this policy? Email us at privacy@ovebot.ai.