PRIVACY POLICY FOR BOTGO
Last updated: August 8, 2026
This Privacy Policy explains how WAAM-it ("we", "us", "our") collects, uses, discloses, and protects information in connection with the botGO mobile application (the "App"), available for Android devices. By installing or using the App, you agree to the collection and use of information in accordance with this policy.
1. WHAT THE APP DOES
botGO is an automation tool that reads incoming notifications from messaging apps installed on your device (such as WhatsApp and SMS), matches them against rules you configure, and sends automatic replies on your behalf. Some features optionally use artificial intelligence providers to generate replies, and optionally extract information from a website you provide to build an automated response knowledge base.
2. INFORMATION WE ACCESS AND WHY
Notification content. To detect incoming messages and reply to them automatically, the App uses Android's Notification Listener capability, which lets it read the text and sender information of notifications posted by other apps on your device, including messaging apps such as WhatsApp and SMS. The App only acts on notifications from the apps you select in its settings. Notification content is processed on your device to decide whether a rule matches and, if so, is used to generate and send a reply. If you enable an AI-based bot or an AI-assisted rule, the relevant message text is sent to the third-party AI provider you configured (see section 4) so it can generate a reply.
Contacts. The App requests access to your device's contacts so it can identify the name associated with a phone number, let you exclude specific contacts from receiving automatic replies, and match rules to specific contacts. Contact data is used and stored locally on your device and is not transmitted to our servers.
SMS. If SMS-based automation is enabled, the App reads incoming SMS messages to apply the same rule matching and auto-reply logic described above.
Website content. If you use the website scanning feature, the App fetches and reads the public content of a website URL you provide, in order to extract business information (such as products, services, pricing, and contact details) and build automated responses. This content may be sent to the AI provider you configured to be processed into that response knowledge base.
Device and account identifiers. Depending on how the App was distributed to you, it may send a device serial number, IMEI, and/or Wi-Fi MAC address to our license verification server, solely to confirm that your installation is authorized to use the App. If the App was installed through Google Play, this license check does not apply, and access to the App instead depends on an active Google Play subscription, which is managed by Google Play Billing.
Diagnostics and crash data. The App keeps a local, on-device diagnostics log to help troubleshoot problems, which is not transmitted anywhere unless you choose to share it with us for support purposes. The App also uses Firebase Crashlytics and Firebase Analytics, which automatically collect crash reports, device information, and app usage statistics, to help us find and fix bugs and understand how the App is used.
API keys. If you connect the App to a third-party AI provider, the API key you enter is stored encrypted on your device and is used only to authenticate requests to that provider. We do not have access to your API key.
Backups. The App lets you export your rules and settings to a JSON file saved to your device's storage. This file is created and controlled by you; we do not receive a copy of it unless you choose to send it to us.
3. INFORMATION WE DO NOT COLLECT
We do not collect or store the content of your messages, contacts, or website scans on our own servers. Processing of message and website content happens on your device and, where you have enabled an AI feature, is sent directly to the AI provider you configured, not to us.
4. THIRD PARTIES WE SHARE INFORMATION WITH
AI providers. If you enable an AI-based bot or AI-assisted features, relevant message text or website content is sent to the AI provider you selected and configured with your own API key (for example, OpenAI or another supported provider). Your use of that provider is also subject to its own privacy policy and terms.
Google Sheets. If you choose to connect a Google Sheet to log conversations, the relevant message data is sent to that Google Sheet, which you control.
Google Play Billing. If you subscribe to the App through Google Play, your subscription and payment information is handled entirely by Google Play. We do not receive or store your payment details; we only receive confirmation of your subscription status.
Firebase (Google). We use Firebase Crashlytics and Firebase Analytics, provided by Google, to collect crash reports and usage analytics as described in section 2. Google's handling of this data is governed by Google's own privacy policy.
License verification server. If applicable to your installation, device identifiers described in section 2 are sent to our license verification server to confirm your installation is authorized.
We do not sell your personal information to anyone.
5. YOUR CHOICES AND CONTROLS
You can review and revoke the App's notification access, contacts access, and SMS access at any time through your device's system settings. You can exclude specific contacts from automatic replies within the App's settings. You can disable the auto-reply service entirely from within the App. You can remove any AI provider API key you have entered. You can uninstall the App at any time, which removes the data stored locally on your device by the App.
6. DATA RETENTION
Data processed by the App, such as your rules, contact exclusions, and diagnostics log, is stored locally on your device for as long as the App is installed, or until you delete it. Crash and analytics data collected through Firebase is retained according to Google's standard Firebase retention periods. If applicable, license verification records are retained for as long as needed to administer your license.
7. DATA SECURITY
API keys and other sensitive settings are stored using Android's encrypted storage on your device. Notification content is processed on your device rather than being routed through our own servers. No method of electronic storage or transmission is completely secure, and we cannot guarantee absolute security.
8. CHILDREN'S PRIVACY
The App is not directed at children under the age of 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us so we can remove it.
9. INTERNATIONAL DATA TRANSFERS
Depending on the AI provider, logging destination, or Google services you choose to use, data may be transferred to and processed in countries other than your own. Those third parties are responsible for safeguarding data in accordance with their own privacy policies.
10. CHANGES TO THIS POLICY
We may update this Privacy Policy from time to time. Changes will be posted with an updated "Last updated" date at the top of this page. Continued use of the App after changes are posted means you accept the revised policy.