Privacy Policy
1. Who we are
This platform is operated by nocodebots.ai (referred to as “we”, “us”, or “our”).
We provide a service that allows users to design, deploy, and run chatbots.
For the purposes of data protection law, we are a data controller for account and platform data, and a data processor where we process data on behalf of our users through their chatbots.
2. The data we collect
Account data
When you register or use the platform, we collect:
- Name
- Email address
- Login credentials
Usage data
We collect information about how the platform is used:
- Chatbot creation and configuration
- Number of chatbots, flows, and related entities
- Usage metrics (e.g. conversations, requests, timestamps)
Chatbot interaction data
When end users interact with chatbots built on this platform, we may process:
- Messages submitted by users
- Responses generated by the chatbot
- Session identifiers and timestamps
Important: The content of chatbot interactions is defined by the chatbot creator. We do not control what data is collected within a chatbot.
Technical data
We automatically collect:
- IP address
- Device/browser information
- Log data (requests, errors, performance)
3. How we use your data
We use personal data to:
- Provide and operate the platform
- Authenticate users and manage accounts
- Enforce licence limits and usage controls
- Monitor performance, security, and abuse
- Improve the platform
We do not sell personal data.
4. Legal basis for processing
We process data under the following bases:
- Contract — to provide the service you have signed up for
- Legitimate interests — to operate, secure, and improve the platform
- Legal obligation — where required by law
5. Chatbot creators (your responsibilities)
If you create chatbots using this platform, you are responsible for:
- Determining what personal data your chatbot collects
- Providing your own privacy notice to end users
- Ensuring lawful use of personal data
In this context, you are the data controller, and we act as your data processor.
6. Data storage and hosting
The platform is hosted in the United Kingdom and/or European Economic Area using cloud infrastructure provided by:
- Amazon Web Services
Data may be stored and processed in AWS data centres located in the UK/EU.
7. Data sharing
We may share data with:
- Cloud infrastructure providers (e.g. AWS)
- Payment processors (for billing)
- Service providers necessary to operate the platform
We do not share personal data with third parties for marketing purposes.
8. Data retention
We retain data only as long as necessary:
- Account data: for the duration of your account
- Usage data: for billing, analytics, and system integrity
- Chatbot interaction data: as configured by the chatbot owner
We may retain limited data for legal or security purposes after account closure.
9. Security
We implement appropriate technical and organisational measures, including:
- Access controls
- Encryption in transit
- Monitoring and logging
- Rate limiting and abuse prevention
No system is completely secure, but we take reasonable steps to protect data.
10. Your rights
Under UK GDPR, you have the right to:
- Access your personal data
- Correct inaccurate data
- Request deletion
- Restrict or object to processing
- Data portability
To exercise these rights, contact us at:
11. Cookies and tracking
We may use cookies or similar technologies for:
- Authentication
- Session management
- Basic analytics
You can control cookies through your browser settings.
12. Third-party services
Chatbots may integrate with third-party services (e.g. AI providers or external APIs).
Where used, those services may process data according to their own privacy policies.
13. Changes to this policy
We may update this policy from time to time.
Material changes will be notified via the platform or email.
14. Contact
If you have any questions about this policy, contact: