Privacy Policy

KeptOn AI is an AI chatbot and automation service based in Bulgaria, in the European Union. We build and operate AI chat agents that answer questions and book appointments on behalf of businesses, on their websites, Instagram and WhatsApp.

For the purposes of the General Data Protection Regulation (GDPR), KeptOn AI acts as a data processor for the messages sent through our agents. The business you are talking to is the data controller of that conversation.

When you chat with one of our agents, we may collect:

• Your name, if you share it during the conversation.
• Your phone number, for appointment confirmations and reminders.
• Your messages, including the questions you ask and anything else you choose to share.
• Appointment details, such as the service you are interested in, and the date and time you book.
• Basic technical information such as the channel you wrote on (website, Instagram or WhatsApp), the language of your messages, and the time of your messages.

We do not ask for payment details, identification documents, or special categories of personal data through our chat agents. Please do not send sensitive information in a chat message.

• To answer your questions about the business's services, prices and opening hours.
• To handle your appointment request and confirm a booking.
• To pass your enquiry and appointment details to the business you contacted, so their team can serve you.
• To send appointment confirmations and reminders where the business has asked for this.
• To keep the agent working correctly and to improve the quality of its answers.

To run the service, we pass conversation data to a small number of trusted providers. Each one processes data only as needed to deliver its part of the service:

• Meta (WhatsApp and Instagram), which delivers the messages you send through those channels.
• OpenAI, which provides the language model the agent uses to understand and answer your messages.
• Botpress, the platform our chat agents run on.
• Make.com, which we use to pass appointment details to the business's calendar or booking tools.
• Google, whose calendar services receive confirmed appointments, and whose infrastructure hosts some of the data.

These providers may process data outside the European Economic Area. Where they do, the transfer is protected by appropriate safeguards such as the European Commission's Standard Contractual Clauses.

We keep conversation data for as long as needed to handle your enquiry and your appointment, and for a reasonable period afterwards so the business's records stay consistent. If you ask us to delete your data, we delete it within 30 days, as described below. Automated backups are cleared on the same cycle.

You have the right to:

• Request a copy of the personal data we hold about you (access).
• Ask us to correct data that is wrong or incomplete.
• Ask us to delete your data.
• Object to or restrict the processing of your data.
• Complain to your national data protection authority. In Bulgaria this is the Commission for Personal Data Protection.

Email info@keptonai.com with the subject "Data deletion request". Include the name or phone number you used in the chat so we can find your conversation. We delete the data within 30 days and confirm by email.

Questions about this policy or about your data? Email us at info@keptonai.com.